PsychoticNinja/Stikked
1
0
Fork 0
mirror of https://github.com/claudehohl/Stikked.git synced 2025-04-25 12:31:06 -05:00
Code Issues Projects Releases Wiki Activity

only htmlspecialchars when post. fixes #452

Browse Source
This commit is contained in:
Claude 2017-10-04 19:50:07 +02:00
parent 6059120327
commit 615119a496
7 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/application/controllers/Main.php
View File

@ -426,7 +426,7 @@ class Main extends CI_Controller
$data['expire_set'] = $this->input->post('expire');
$data['private_set'] = $this->input->post('private');
$data['snipurl_set'] = $this->input->post('snipurl');
$data['paste_set'] = $this->input->post('code');
$data['paste_set'] = htmlspecialchars($this->input->post('code'));
$data['title_set'] = $this->input->post('title');
$data['reply'] = $this->input->post('reply');
$data['lang_set'] = $this->input->post('lang');

2
htdocs/themes/bootstrap/views/defaults/paste_form.php
View File

@ -42,7 +42,7 @@
</div>
<div class="control-group">
<div class="controls">
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea>
</div>
</div>

2
htdocs/themes/cleanwhite/views/defaults/paste_form.php
View File

@ -47,7 +47,7 @@
<span class="instruction"><a href="#" id="enable_codemirror" data-lang-enablesynhl="<?php echo lang('paste_enablesynhl'); ?>" data-lang-disablesynhl="<?php echo lang('paste_disablesynhl'); ?>"></a></span>
</label>
<textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
<textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea>
</div>
<?php if($this->config->item('enable_captcha') && $this->session->userdata('is_human') === null){ ?>

2
htdocs/themes/default/views/defaults/paste_form.php
View File

@ -43,7 +43,7 @@
<span class="instruction"><a href="#" id="enable_codemirror" data-lang-enablesynhl="<?php echo lang('paste_enablesynhl'); ?>" data-lang-disablesynhl="<?php echo lang('paste_disablesynhl'); ?>"></a></span>
</label>
<textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
<textarea id="code" name="code" cols="40" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea>
</div>

2
htdocs/themes/geocities/views/defaults/paste_form.php
View File

@ -49,7 +49,7 @@
</div>
<div class="control-group">
<div class="controls">
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea>
</div>
</div>

2
htdocs/themes/i386/views/defaults/paste_form.php
View File

@ -49,7 +49,7 @@
</div>
<div class="control-group">
<div class="controls">
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
<textarea id="code" class="span12" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea>
</div>
</div>

2
htdocs/themes/stikkedizr/views/defaults/paste_form.php
View File

@ -48,7 +48,7 @@
</div>
<div class="control-group">
<div class="controls">
<textarea id="code" class="form-control" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo htmlspecialchars($paste_set); }?></textarea>
<textarea id="code" class="form-control" name="code" rows="20" tabindex="4"><?php if(isset($paste_set)){ echo $paste_set; }?></textarea>
</div>
</div>