mirror of
https://github.com/sbrl/Pepperminty-Wiki.git
synced 2024-12-26 02:55:02 +00:00
Prevent users from including attacks in their names.
This commit is contained in:
parent
9702343735
commit
3c5815bf76
1 changed files with 1 additions and 1 deletions
2
core.php
2
core.php
|
@ -1129,7 +1129,7 @@ class page_renderer
|
|||
$result = "";
|
||||
if(in_array($name, $settings->admins))
|
||||
$result .= $settings->admindisplaychar;
|
||||
$result .= "<a href='?page=" . rawurlencode(get_user_pagename($name)) . "'>$name</a>";
|
||||
$result .= "<a href='?page=" . rawurlencode(get_user_pagename($name)) . "'>" . htmlentities($name) . "</a>";
|
||||
|
||||
return $result;
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue