summaryrefslogtreecommitdiff
path: root/www-ssl/inc
diff options
context:
space:
mode:
Diffstat (limited to 'www-ssl/inc')
-rwxr-xr-xwww-ssl/inc/secure.php12
1 files changed, 6 insertions, 6 deletions
diff --git a/www-ssl/inc/secure.php b/www-ssl/inc/secure.php
index 687289fc..d6b5c512 100755
--- a/www-ssl/inc/secure.php
+++ b/www-ssl/inc/secure.php
@@ -7,9 +7,9 @@ if( $DEBUG)
foreach ($_GET as $k => $v)
{
- $v = htmlspecialchars($v);
- $v = mysql_escape_string($v);
-// $v = htmlentities($v);
+// $v = htmlspecialchars($v, ENT_QUOTES);
+// $v = mysql_escape_string($v);
+ $v = htmlentities($v, ENT_QUOTES);
if (preg_match('/([\'"`\'])/', $v, $match))
{
print "sorry get has illegal char '$match[1]'";
@@ -23,9 +23,9 @@ foreach ($_GET as $k => $v)
foreach ($_POST as $k => $v)
{
- $v = htmlspecialchars($v);
- $v = mysql_escape_string($v);
-// $v = htmlentities($v);
+// $v = htmlspecialchars($v, ENT_QUOTES);
+// $v = mysql_escape_string($v);
+ $v = htmlentities($v, ENT_QUOTES);
if (preg_match('/([\'"`\'])/', $v, $match)) {
print "sorry post has illegal char '$match[1]'";
exit;