From 4226ef6f206ce7a5d81b3f04b85d4b47937a0f0f Mon Sep 17 00:00:00 2001 From: Filip Komar Date: Fri, 10 Jan 2014 20:16:39 +0000 Subject: security improved for some pages with strip_tags of --- en/about/constitution/index.php | 6 +++--- en/downloads/get/index.php | 5 ++++- langs/diff.php | 6 +++--- langs/missing.php | 4 ++-- 4 files changed, 12 insertions(+), 9 deletions(-) diff --git a/en/about/constitution/index.php b/en/about/constitution/index.php index 00bcb49f9..70ae88108 100644 --- a/en/about/constitution/index.php +++ b/en/about/constitution/index.php @@ -34,9 +34,9 @@ _lang_load($locale, "about/constitution");

- +

diff --git a/langs/missing.php b/langs/missing.php index 03b6cd698..c8f5a4705 100644 --- a/langs/missing.php +++ b/langs/missing.php @@ -2,8 +2,8 @@ /** */ -$s = isset($_GET['s']) ? trim($_GET['s']) : null; -$l = isset($_GET['l']) ? trim($_GET['l']) : null; +$s = isset($_GET['s']) ? strip_tags(trim($_GET['s'])) : null; +$l = isset($_GET['l']) ? strip_tags(trim($_GET['l'])) : null; if (is_null($s)) { header('Location: /langs/report.php'); -- cgit v1.2.1