xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-19 17:51:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix another vulberability <script>alert('test')</script> now not working anymore

Browse Source
This commit is contained in:
Shadowss
2013-10-05 12:26:35 +03:00
parent edac24eb28
commit 8ceb2c7f41
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Message.php
+2 -2
View File
@@ -396,7 +396,7 @@ class Message {
if($permission[opt7]==1){ if($permission[opt7]==1){
if ($userally != 0) { if ($userally != 0) {
while ($allmembers = mysql_fetch_array($allmembersQ)) { while ($allmembers = mysql_fetch_array($allmembersQ)) {
$database->sendMessage($allmembers[id],$session->uid,addslashes($topic),addslashes($text),0,$alliance,$player,$coor,$report); $database->sendMessage($allmembers[id],$session->uid,htmlspecialchars(addslashes($topic)),htmlspecialchars(addslashes($text)),0,$alliance,$player,$coor,$report);
} }
} }
} }
@@ -479,7 +479,7 @@ class Message {
} }
} }
} }
$database->sendMessage($user, $session->uid, addslashes($topic), addslashes($text), 0, $alliance, $player, $coor, $report); $database->sendMessage($user, $session->uid, htmlspecialchars(addslashes($topic)), htmlspecialchars(addslashes($text)), 0, $alliance, $player, $coor, $report);
} }
} }