Menu ▾ ▴

Diff of /branches/2.3.x/pivotx/modules/formclass.php [r4456] .. [r4457]  Maximize  Restore

Switch to side-by-side view 

--- a/branches/2.3.x/pivotx/modules/formclass.php
+++ b/branches/2.3.x/pivotx/modules/formclass.php
@@ -61,7 +61,8 @@
 
         // Set the 'action' attribute for the form. (whereto it will submit)
         if ($action=="") {
-            $action = $protocol . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING'];
+            $action = $protocol . $_SERVER['HTTP_HOST'] .
+                htmlspecialchars($_SERVER['PHP_SELF']) . "?" . $_SERVER['QUERY_STRING'];
         }
 
         // Always remove the 'retry=1' from the action.