MDL-45683 user: Escaping Skype ID used in profile

moodle · Jul 7, 2014 · 0207466 · 0207466
1 parent 2ca9e09
commit 0207466
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/user/profile.php b/user/profile.php
@@ -334,7 +334,7 @@
 
 if ($user->skype && !isset($hiddenfields['skypeid'])) {
     $imurl = 'skype:'.urlencode($user->skype).'?call';
-    $iconurl = new moodle_url('http://mystatus.skype.com/smallicon/'.$user->skype);
+    $iconurl = new moodle_url('http://mystatus.skype.com/smallicon/'.urlencode($user->skype));
     if (strpos($CFG->httpswwwroot, 'https:') === 0) {
         // Bad luck, skype devs are lazy to set up SSL on their servers - see MDL-37233.
         $statusicon = '';