From a5e455f1c9cbdcdb295be96010f83de3ebf7000f Mon Sep 17 00:00:00 2001
From: "Cathy J. Fitzpatrick" <cathy@cathyjf.com>
Date: Tue, 26 Mar 2013 03:51:06 -0700
Subject: [PATCH] Properly sanitise displayed userid

---
 lib/common.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/common.inc.php b/lib/common.inc.php
index aa7ef5e86..a64170065 100644
--- a/lib/common.inc.php
+++ b/lib/common.inc.php
@@ -46,7 +46,7 @@ function getGroup($username) {
 
 function getLoginInformation() {
 	global $user;
-	return '<p>You are logged in as ' . $user['group'] . $user['userid'] . '.</p>';
+	return '<p>You are logged in as ' . $user['group'] . htmlentities($user['userid']) . '.</p>';
 }
 
 define('AUTH_NOASSERTION', 0);