Update of /cvsroot/phpcms-plugins/searchlog4phpCMS
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv19109
Modified Files:
searchlog.php
Log Message:
fixed a security bug
Index: searchlog.php
===================================================================
RCS file: /cvsroot/phpcms-plugins/searchlog4phpCMS/searchlog.php,v
retrieving revision 1.1.1.1
retrieving revision 1.2
diff -u -d -r1.1.1.1 -r1.2
--- searchlog.php 22 Apr 2004 07:59:16 -0000 1.1.1.1
+++ searchlog.php 4 Aug 2004 09:37:07 -0000 1.2
@@ -51,7 +51,7 @@
$time = strftime('%G-%m-%d %T');
-$entry = $time.'|'.$query.'|'.$referer;
+$entry = $time.'|'.htmlspecialchars ($query).'|'.htmlspecialchars ($referer);
$fh = fopen($logfile,'a');
fwrite($fh, $entry."\n");
|