mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-20 07:56:06 +02:00
Code Issues Projects Releases Wiki Activity

fix for XSS exploit in search

Browse Source
This commit is contained in:
moodler 2005-12-05 03:11:32 +00:00
parent fd78420b78
commit 27b219f16c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
mod/data/lib.php
View File

@ -696,10 +696,10 @@ function data_print_template($records, $data, $search, $listmode){
************************************************************************/
function data_print_preference_form($data, $perpage, $search){
echo '<br />';
echo '<form name="options" action="view.php?d='.$data->id.'&amp;search='.$search.'" method="post">';
echo '<form name="options" action="view.php?d='.$data->id.'&amp;search='.s($search).'" method="post">';
echo '<table id="optiontable" align="center">';
echo '<tr><td>'.get_string('search').'</td>';
echo '<td><input type="text" size = "16" name="search" value="'.$search.'" />';
echo '<td><input type="text" size = "16" name="search" value="'.s($search).'" />';
echo '</td></tr>';
echo '<tr align="right"><td>';
echo '<label for="perpage">'.get_string('pagesize','data').'</label>';