xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-19 17:51:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(admin): escape stored player values in admin templates [#139] (#272)

Browse Source
This commit is contained in:
Ferywir
2026-06-23 21:00:51 +02:00
committed by GitHub
parent 90c5cdd97c
commit c0bbf2bfbe
12 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Admin/Templates/playerheroinfo.tpl
+1 -1
View File
@@ -91,7 +91,7 @@ if ($hero !== false) {
<tr><td colspan="3" class="hero-sub" style="text-align:center">Hero #<?php echo $x++; ?></td></tr>
<tr>
<td width="35%">Hero Name</td>
<td colspan="2" class="hero-name"><?php echo $h['name']; ?></td>
<td colspan="2" class="hero-name"><?php echo htmlspecialchars($h['name']); ?></td>
</tr>
<tr>
<td>Hero Level</td>