xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-29 06:37:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(admin): escape reflected request params in admin templates [#139] (#270)

Browse Source
This commit is contained in:
Ferywir
2026-06-23 16:37:11 +02:00
committed by GitHub
parent e17bb3dec6
commit 749a55aaf5
12 changed files with 23 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Admin/Templates/editVillage.tpl
+1 -1
View File
@@ -47,7 +47,7 @@ if(isset($id)) { include("search2.tpl"); ?>
<form action="../GameEngine/Admin/Mods/editBuildings.php" method="POST">
<?php echo csrf_field(); ?>
<input type="hidden" name="admid" value="<?php echo $_SESSION['id']; ?>">
<input type="hidden" name="id" value="<?php echo $_GET['did']; ?>">
<input type="hidden" name="id" value="<?php echo (int)($_GET['did'] ?? 0); ?>">
<div class="vcard">
<div class="vhead">Edit Village – <?php echo htmlspecialchars($village['name']); ?> (<?php echo $coor['x'].'|'.$coor['y']; ?>)