fix possible xss issue

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@2830 f5dc347c-c33d-0410-90a0-b07cc1902cb9
mantisbt · Aug 8, 2004 · 153b4b7 · 153b4b7
1 parent 4f80fdb
commit 153b4b7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/query_delete_page.php b/query_delete_page.php
@@ -32,7 +32,7 @@
 ?>
 	<br />
 	<div align="center">
-	<center><b><?php print filter_db_get_name( $f_query_id ); ?></b></center>
+	<center><b><?php print string_display( filter_db_get_name( $f_query_id ) ); ?></b></center>
 	<?php echo lang_get( 'query_delete_msg' ); ?>
 
 	<form method="post" action="<?php print $t_delete_url; ?>">

diff --git a/query_view_page.php b/query_view_page.php
@@ -47,7 +47,7 @@
 
 		print '<td>';
 
-		print "<a href=" . $t_use_query_url . db_prepare_int( $t_id ) . ">$t_name</a>";
+		print '<a href=' . $t_use_query_url . db_prepare_int( $t_id ) . '>' . string_display( $t_name ) . '</a>';
 
 		if ( filter_db_can_delete_filter( $t_id ) ) {
 			print " [<a href=" . $t_delete_query_url . db_prepare_int( $t_id ) . ">" . lang_get( 'delete_query' ) . "</a>]";