From ebca3013e30d64c57e96024ac9b29d07b974be3d Mon Sep 17 00:00:00 2001
From: "Cathy J. Fitzpatrick" <cathy@cathyjf.com>
Date: Tue, 2 Apr 2013 01:13:31 -0600
Subject: [PATCH] Fix XSS vulnerability in ladder.php

---
 ladder.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ladder.php b/ladder.php
index db2df3992..9c663e4ec 100644
--- a/ladder.php
+++ b/ladder.php
@@ -91,7 +91,7 @@ foreach ($toplist as $row)
 	$i++;
 ?>
 		<tr<?php if (floatval($row['rprd']) > 100) echo ' style="color:#999"';?>>
-			<td><?php echo $i; ?></td><td><?php echo $row['username']; ?></td><td><strong><?php echo round($row['acre']); ?></strong></td><td><?php echo number_format($row['gxe'],1); ?></td>
+			<td><?php echo $i; ?></td><td><?php echo htmlentities($row['username']); ?></td><td><strong><?php echo round($row['acre']); ?></strong></td><td><?php echo number_format($row['gxe'],1); ?></td>
 			<td><?php echo '<em>'.round($row['rpr']).'<small> &#177; '.round($row['rprd']).'</small></em>'; if (floatval($row['rprd']) > 100) echo ' <small>(provisional)</small>'; ?></td>
 		</tr>
 <?php
@@ -105,4 +105,4 @@ if (!$output)
 </body></html>
 <?php
 }
-?>
\ No newline at end of file
+?>