sbrl-github/Pepperminty-Wiki
sbrl-github/Pepperminty-Wiki
1
0
Fork 0
mirror of https://github.com/sbrl/Pepperminty-Wiki.git synced 2024-11-22 16:33:00 +00:00
Code Activity

page-login: minor htmlentities for breakfast, lunch, and tea

Browse source
This commit is contained in:
Starbeamrainbowlabs 2021-09-03 01:37:11 +01:00
parent e2517c0b20
commit c0c2bd7f6a
Signed by: sbrl
GPG key ID: 1BE5172E637709C2
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
modules/page-login.php
View file

@ -35,7 +35,7 @@ register_module([
// Build the action url that will actually perform the login // Build the action url that will actually perform the login
$login_form_action_url = "index.php?action=checklogin"; $login_form_action_url = "index.php?action=checklogin";
if(isset($_GET["returnto"])) if(isset($_GET["returnto"]))
$login_form_action_url .= "&returnto=" . rawurlencode($_GET["returnto"]); $login_form_action_url .= "&returnto=" . rawurlencode($_GET["returnto"]);
if($env->is_logged_in && !empty($_GET["returnto"])) if($env->is_logged_in && !empty($_GET["returnto"]))
{ {
@ -136,7 +136,7 @@ register_module([
if(!save_userdata()) { if(!save_userdata()) {
http_response_code(503); http_response_code(503);
exit(page_renderer::render_main("Login Error - $settings->sitename", "<p>Your credentials were correct, but $settings->sitename was unable to log you in as an updated hash of your password couldn't be saved. Updating your password hash to the latest and strongest hashing algorithm is an important part of keeping your account secure.</p> exit(page_renderer::render_main("Login Error - $settings->sitename", "<p>Your credentials were correct, but $settings->sitename was unable to log you in as an updated hash of your password couldn't be saved. Updating your password hash to the latest and strongest hashing algorithm is an important part of keeping your account secure.</p>
<p>Please contact $settings->admindetails_name, $settings->sitename's adminstrator, for assistance (their email address can be found at the bottom of every page, including this one).</p>")); <p>Please contact ".htmlentities($settings->admindetails_name).", $settings->sitename's adminstrator, for assistance (their email address can be found at the bottom of every page, including this one).</p>"));
} }
error_log("[PeppermintyWiki/$settings->sitename/login] Updated password hash for $user."); error_log("[PeppermintyWiki/$settings->sitename/login] Updated password hash for $user.");
} }
@ -169,6 +169,7 @@ register_module([
if(!$env->is_logged_in || !$env->is_admin) { if(!$env->is_logged_in || !$env->is_admin) {
http_response_code(401); http_response_code(401);
header("content-type: text/plain");
exit("Error: Only moderators are allowed to use this action."); exit("Error: Only moderators are allowed to use this action.");
} }