nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2025-12-30 00:53:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Escape user data on conference_control_edit.php (#3097)

Browse Source
This commit is contained in:
AlexanderDCrane
2018-06-09 11:39:20 -06:00
committed by FusionPBX
parent b4b5150954
commit 43578cacde
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/conference_controls/conference_control_edit.php
View File

@@ -128,7 +128,7 @@
echo " ".$text['label-control_name']."\n";
echo "</td>\n";
echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='control_name' maxlength='255' value=\"$control_name\">\n";
echo " <input class='formfld' type='text' name='control_name' maxlength='255' value=\"".escape($control_name)."\">\n";
echo "<br />\n";
echo $text['description-control_name']."\n";
echo "</td>\n";
@@ -164,7 +164,7 @@
echo " ".$text['label-control_description']."\n";
echo "</td>\n";
echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='control_description' maxlength='255' value=\"$control_description\">\n";
echo " <input class='formfld' type='text' name='control_description' maxlength='255' value=\"".escape($control_description)."\">\n";
echo "<br />\n";
echo $text['description-control_description']."\n";
echo "</td>\n";
@@ -172,7 +172,7 @@
echo " <tr>\n";
echo " <td colspan='2' align='right'>\n";
if ($action == "update") {
echo " <input type='hidden' name='conference_control_uuid' value='$conference_control_uuid'>\n";
echo " <input type='hidden' name='conference_control_uuid' value='".escape($conference_control_uuid)."'>\n";
}
echo " <input type='submit' class='btn' value='".$text['button-save']."'>\n";
echo " </td>\n";