Changeset 12 for trunk/client/modules/Elezioni/index.php

Timestamp:

Dec 2, 2009, 6:20:50 PM (15 years ago)

Author:

roby

Message:

sicurezza anti xss

File:

• trunk/client/modules/Elezioni/index.php (modified) (1 diff)

trunk/client/modules/Elezioni/index.php

@@ -145 +145 @@
 function menu() {
         global $hondt,$lang,$multicomune, $tema, $op, $prefix, $dbi, $offset, $min,$descr_cons,$info,$dati, $votog,$votol,$votoc,$circo, $id_cons,$tipo_cons,$genere,$descr_cons,$id_cons_gen,$id_comune,$id_circ,$minsez,$offsetsez, $limite,$hondt,$tema_on,$js;
-        
+
+$tema=htmlentities($tema); //xss        
 # include menu da tema
 if (file_exists("temi/$tema/menu.php")) {