novabbs
/
rocksolid-light
3
0
Fork 1
Code Issues 22 Pull Requests Releases Wiki Activity

Convert htmlentities in Reply in mail.php.

This commit is contained in:
Retro_Guy 2023-08-27 11:22:36 -07:00
parent 7053960211
commit dfcbf29d3f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Rocksolid_Light/spoolnews/mail.php
View File

@ -314,7 +314,7 @@ if (isset($_POST['command']) && $_POST['command'] == 'Send') {
echo '<table><tbody><tr>';
echo "<td>To: </td><td><input type='text' name='to' value='" . $mail_to . "'/></td>";
echo '</tr><tr>';
echo "<td>Subject: </td><td><input type='text' name='subject' value='" . $subject . "'/></td>";
echo "<td>Subject: </td><td><input type='text' name='subject' value='" . htmlentities($subject) . "'/></td>";
echo '</tr><tr>';
echo "<td></td><td><textarea class='postbody' id='message' name='message'>$message</textarea></td>";
echo '</tr><tr>';