- web: single quotes in team name HTML didn't work

because of magic quotes (need stripslashes()).

svn path=/trunk/boinc/; revision=14754
This commit is contained in:
David Anderson 2008-02-17 16:12:03 +00:00
parent 8c187004f4
commit 4ea0acb65e
2 changed files with 8 additions and 1 deletions

View File

@ -1432,4 +1432,9 @@ Rom Feb 15 2008
boinc_cli_curl.vcproj
David Feb 17 2008
- web: single quotes in team name HTML didn't work
because of magic quotes (need stripslashes()).
html/user/
team_edit_action.php

View File

@ -19,7 +19,9 @@ if ($x) {
}
$team_name = process_user_text(strip_tags(post_str("name")));
$team_name_lc = strtolower($team_name);
$tnh = post_str("name_html", true);
if (get_magic_quotes_gpc()) $tnh = stripslashes($tnh);
$team_name_html = sanitize_html($tnh);
$team_name_html = process_user_text($team_name_html);