Leahnaya/pokemon-showdown-client
1
0
Fork 0
mirror of https://github.com/smogon/pokemon-showdown-client.git synced 2026-08-21 18:40:24 -05:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fix XSS vulnerability in ladder.php

Browse Source
This commit is contained in:
Cathy J. Fitzpatrick
2013-04-02 01:13:31 -06:00
parent 82de98d166
commit ebca3013e3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ladder.php
View File

@@ -91,7 +91,7 @@ foreach ($toplist as $row)
$i++;
?>
<tr<?php if (floatval($row['rprd']) > 100) echo ' style="color:#999"';?>>
<td><?php echo $i; ?></td><td><?php echo $row['username']; ?></td><td><strong><?php echo round($row['acre']); ?></strong></td><td><?php echo number_format($row['gxe'],1); ?></td>
<td><?php echo $i; ?></td><td><?php echo htmlentities($row['username']); ?></td><td><strong><?php echo round($row['acre']); ?></strong></td><td><?php echo number_format($row['gxe'],1); ?></td>
<td><?php echo '<em>'.round($row['rpr']).'<small> &#177; '.round($row['rprd']).'</small></em>'; if (floatval($row['rprd']) > 100) echo ' <small>(provisional)</small>'; ?></td>
</tr>
<?php
@@ -105,4 +105,4 @@ if (!$output)
</body></html>
<?php
}
?>
?>