Fix issue with statistics

Indexhibit · Dec 10, 2019 · 05222bd · 05222bd
1 parent d5a2f37
commit 05222bd
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 4 deletions.
diff --git a/ndxzsite/plugin/plugin.new_statistics.php b/ndxzsite/plugin/plugin.new_statistics.php
@@ -22,8 +22,8 @@ class New_statistics
 
 	public function __construct()
 	{
-		$this->uri = (isset($_SERVER['REQUEST_URI'])) ? $_SERVER['REQUEST_URI'] : '';
-		$this->refer = (isset($_SERVER['HTTP_REFERER'])) ?  $_SERVER['HTTP_REFERER'] : '';
+		$this->uri = (isset($_SERVER['REQUEST_URI'])) ? htmlspecialchars($_SERVER['REQUEST_URI']) : '';
+		$this->refer = (isset($_SERVER['HTTP_REFERER'])) ? htmlspecialchars($_SERVER['HTTP_REFERER']) : '';
 	}
 
 	public function counter()

diff --git a/ndxzstudio/defaults.php b/ndxzstudio/defaults.php
@@ -4,7 +4,7 @@
 ini_set("magic_quotes_runtime", 0);
 
 // version
-define('VERSION', '2.1.5');
+define('VERSION', '2.1.6');
 
 // Paths/definitions of things (relative to index file)
 define('LIBPATH', 'lib');

diff --git a/ndxzstudio/lib/template.php b/ndxzstudio/lib/template.php
@@ -69,6 +69,7 @@ public function tpl_update_available()
 		$params = array();
 		$params['v']		= VERSION;
 		$params['method']	= 'version';
+		$params['lang']		= $OBJ->vars->settings['site_lang'];
 
 		$encoded_params = array();
 
@@ -89,7 +90,7 @@ public function tpl_update_available()
 		// new version available?
 		if ($result['success'] == true)
 		{
-			return "<div style='height: 36px; background: red; color: white;'><div style='padding: 12px;'>A new version is available - <a href='https://www.indexhibit.org/news/' style='color: white;'>click here</a></div></div>";
+			return $result['msg'];
 		}
 
 		if (VERSION > $OBJ->vars->settings['version'])