xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-21 02:30:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(admin): escape stored player values in admin templates [#139] (#272)

Browse Source
This commit is contained in:
Ferywir
2026-06-23 21:00:51 +02:00
committed by GitHub
parent 90c5cdd97c
commit c0bbf2bfbe
12 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Admin/Templates/natars.tpl
+2 -2
View File
@@ -116,8 +116,8 @@ $deletedArtifacts = $database->getDeletedArtifacts();
<td><?php echo $info['bonus'];?></td>
<td><?php echo $info['effectInfluence'];?></td>
<td><?php echo date("d.m.Y H:i:s", $artifact['conquered']);?></td>
<td><?php $u=$database->getUserField($artifact['owner'],"username",0); echo $u!="[?]"?'<a href="?p=player&uid='.$artifact['owner'].'">'.$u.'</a>':'<span style="color:gray">'.$u.'</span>';?></td>
<td><?php $v=$database->getVillageField($artifact['vref'],"name"); echo $v!="[?]"?'<a href="?p=village&did='.$artifact['vref'].'">'.$v.'</a>':'<span style="color:gray">'.$v.'</span>';?></td>
<td><?php $u=htmlspecialchars($database->getUserField($artifact['owner'],"username",0)); echo $u!="[?]"?'<a href="?p=player&uid='.$artifact['owner'].'">'.$u.'</a>':'<span style="color:gray">'.$u.'</span>';?></td>
<td><?php $v=htmlspecialchars($database->getVillageField($artifact['vref'],"name")); echo $v!="[?]"?'<a href="?p=village&did='.$artifact['vref'].'">'.$v.'</a>':'<span style="color:gray">'.$v.'</span>';?></td>
</tr>
<?php } }?>
</table>