5769 urlencode GET var passed into language editor template

atutor · Mar 4, 2017 · 19b4164 · 19b4164
1 parent 2c0738b
commit 19b4164
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/themes/default/admin/system_preferences/language_edit.tmpl.php b/themes/default/admin/system_preferences/language_edit.tmpl.php
@@ -1,5 +1,5 @@
 
-<form method="post" action="<?php echo $_SERVER['PHP_SELF'] . '?lang_code=' . $_GET['lang_code']; ?>">
+<form method="post" action="<?php echo $_SERVER['PHP_SELF'] . '?lang_code=' . urlencode($_GET['lang_code']); ?>">
 
 <input type="hidden" name="old_code" value="<?php echo $this->lang->getCode(); ?>" />
 

diff --git a/themes/mobile/admin/system_preferences/language_edit.tmpl.php b/themes/mobile/admin/system_preferences/language_edit.tmpl.php
@@ -1,5 +1,5 @@
 
-<form method="post" action="<?php echo $_SERVER['PHP_SELF'] . '?lang_code=' . $_GET['lang_code']; ?>">
+<form method="post" action="<?php echo $_SERVER['PHP_SELF'] . '?lang_code=' . urlencode($_GET['lang_code']); ?>">
 
 <input type="hidden" name="old_code" value="<?php echo $this->lang->getCode(); ?>" />
 

diff --git a/themes/simplified_desktop/admin/system_preferences/language_edit.tmpl.php b/themes/simplified_desktop/admin/system_preferences/language_edit.tmpl.php
@@ -1,5 +1,5 @@
 
-<form method="post" action="<?php echo $_SERVER['PHP_SELF'] . '?lang_code=' . $_GET['lang_code']; ?>">
+<form method="post" action="<?php echo $_SERVER['PHP_SELF'] . '?lang_code=' . urlencode($_GET['lang_code']); ?>">
 
 <input type="hidden" name="old_code" value="<?php echo $this->lang->getCode(); ?>" />