From: <dai...@us...> - 2011-05-29 04:45:17
|
Revision: 4580 http://web-erp.svn.sourceforge.net/web-erp/?rev=4580&view=rev Author: daintree Date: 2011-05-29 04:45:11 +0000 (Sun, 29 May 2011) Log Message: ----------- check for < or > in includes/MiscFunction.php CheckIllegalCharacters Modified Paths: -------------- trunk/includes/MiscFunctions.php Modified: trunk/includes/MiscFunctions.php =================================================================== --- trunk/includes/MiscFunctions.php 2011-05-29 04:07:16 UTC (rev 4579) +++ trunk/includes/MiscFunctions.php 2011-05-29 04:45:11 UTC (rev 4580) @@ -115,7 +115,9 @@ OR strstr($CheckVariable,"\"") OR strstr($CheckVariable,'&') OR strstr($CheckVariable,"\\") - OR strstr($CheckVariable,'"')){ + OR strstr($CheckVariable,'"') + OR strstr($CheckVariable,'>') + OR strstr($CheckVariable,'<')){ return true; } else { This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |