diff options
| author | Greg Roach <fisharebest@gmail.com> | 2013-12-26 19:05:37 +0000 |
|---|---|---|
| committer | Greg Roach <fisharebest@gmail.com> | 2013-12-26 19:05:37 +0000 |
| commit | e394b58dd0ee31a2e1e56880cea2541b39c2b99c (patch) | |
| tree | 84829212287821a319b40fadbd5e04711b6a8a8a | |
| parent | 69aed8f97e2ee55cfd0826fd730df6ce42206fb9 (diff) | |
| download | webtrees-e394b58dd0ee31a2e1e56880cea2541b39c2b99c.tar.gz webtrees-e394b58dd0ee31a2e1e56880cea2541b39c2b99c.tar.bz2 webtrees-e394b58dd0ee31a2e1e56880cea2541b39c2b99c.zip | |
Unescaped output in medialist.php
| -rw-r--r-- | medialist.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/medialist.php b/medialist.php index d1a728ff2a..f3c04b3cb9 100644 --- a/medialist.php +++ b/medialist.php @@ -41,7 +41,7 @@ $reset = WT_Filter::get('reset'); $apply_filter = WT_Filter::get('apply_filter'); $filter = WT_Filter::get('filter', null, ''); // MySQL needs an empty string, not NULL $columns = WT_Filter::getInteger('columns', 1, 2, 2); -$subdirs = WT_Filter::get('subdirs'); +$subdirs = WT_Filter::get('subdirs', 'on'); $currentdironly = ($subdirs=='on') ? false : true; // reset all variables @@ -128,7 +128,7 @@ $controller->pageHeader(); <?php echo WT_I18N::translate('Search filters'); ?> </td> <td class="optionbox wrap width25"> - <input id="filter" name="filter" value="<?php echo $filter; ?>" size="14" dir="auto"> + <input id="filter" name="filter" value="<?php echo WT_Filter::escapeHtml($filter); ?>" size="14" dir="auto"> </td> <td class="descriptionbox wrap width25"> <?php echo WT_I18N::translate('Columns per page'); ?> |