diff options
| author | czaks <marcin@6irc.net> | 2014-04-19 00:24:52 +0200 |
|---|---|---|
| committer | czaks <marcin@6irc.net> | 2014-04-19 00:24:52 +0200 |
| commit | bfc4df8276f1f3577e8d40f300ed0f3f02613cd0 (patch) | |
| tree | ff3a2e0d49a9c3d8058aa46df600d2b6eac674f2 /attentionbar.php | |
| parent | 5b9b0abc54d2aa7f632909ecdfeb11862dffb9ae (diff) | |
| parent | bd498227f5faebad7058efeae1f7badc469d7a0e (diff) | |
Merge branch 'master' of github.com:vichan-devel/Tinyboard into br-integration
Diffstat (limited to 'attentionbar.php')
| -rw-r--r-- | attentionbar.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/attentionbar.php b/attentionbar.php index 18a5d9ac..25f349cb 100644 --- a/attentionbar.php +++ b/attentionbar.php @@ -3,7 +3,7 @@ checkBan(); $text = isset($_POST['text']) ? $_POST['text'] : ''; if(strlen($text)>0 && !preg_match('/a href/', $text)) { - file_put_contents("attentionbar.txt",$text); + file_put_contents("attentionbar.txt",htmlspecialchars($text)); if(strlen($_SERVER['HTTP_REFERER'])>0) { header('Location: ' . $_SERVER['HTTP_REFERER']); } else { header('Location: /'); } } else print(file_get_contents("attentionbar.txt")); |