In the admin UI do not interpret HTML characters in the admin password.

thexerteproject · Sep 7, 2017 · 2d1123b · 2d1123b
1 parent 4f915de
commit 2d1123b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/website_code/php/management/site.php b/website_code/php/management/site.php
@@ -102,7 +102,7 @@
     echo "<p>" . MANAGEMENT_SITE_ADMIN_USER . "<form><textarea id=\"admin_username\">" . $row['admin_username'] . "</textarea></form>
         </p>";	
 
-    echo "<p>" . MANAGEMENT_SITE_ADMIN_PASSWORD . "<form><textarea id=\"admin_password\">" . $row['admin_password'] . "</textarea></form>
+    echo "<p>" . MANAGEMENT_SITE_ADMIN_PASSWORD . "<form><textarea id=\"admin_password\">" . htmlspecialchars($row['admin_password']) . "</textarea></form>
         </p>";	
 
     echo "</div>";