#3 Hexafind.php Non-Persistent XSS (<=v1.0.7.2) Patch

[hexon]

In the File Connect4.php

Line 23:
echo "Admin Page = ",$url , "<br \&gt;";

Change it to :

echo "Admin Page = ",htmlspecialchars($url,ENT_QUOTES) , "<br \&gt;";

Line 31 :
echo htmlspecialchars($url,ENT_QUOTES)," Failed" , "<br \&gt;";