Changeset 1121 for trunk/smf/Sources/Subs-Auth.php

Timestamp:

03/29/10 15:37:29 (2 years ago)

Author:

bogdan2412

Message:

Updated with changes from live.

• Updated SMF to 1.1.11
• Added Summify to site and forum
• Small change to job detail view

File:

• trunk/smf/Sources/Subs-Auth.php (modified) (4 diffs)

trunk/smf/Sources/Subs-Auth.php

@@ -6 +6 @@
 * Open-Source Project Inspired by Zef Hemel (zef@zefhemel.com)                    *
 * =============================================================================== *
-* Software Version:           SMF 1.1.10                                          *
+* Software Version:           SMF 1.1.11                                          *
 * Software by:                Simple Machines (http://www.simplemachines.org)     *
 * Copyright 2006-2009 by:     Simple Machines LLC (http://www.simplemachines.org) *
@@ -278 +278 @@
                         // Only if it's not already in the $scripturl!
                         if (!isset($temp[$k]))
-                                $context['get_data'] .= $k . '=' . $v . ';';
+                                $context['get_data'] .= urlencode($k) . '=' . urlencode($v) . ';';
                         // If it changed, put it out there, but with an ampersand.
                         elseif ($temp[$k] != $_GET[$k])
-                                $context['get_data'] .= $k . '=' . $v . '&';
+                                $context['get_data'] .= urlencode($k) . '=' . urlencode($v) . '&';
                 }
         }
@@ -288 +288 @@
                 // Add up all the data from $_GET into get_data.
                 foreach ($_GET as $k => $v)
-                        $context['get_data'] .= $k . '=' . $v . ';';
+                        $context['get_data'] .= urlencode($k) . '=' . urlencode($v) . ';';
         }
 
@@ -326 +326 @@
         if (!is_array($v))
                 return '
-<input type="hidden" name="' . $k . '" value="' . strtr(stripslashes($v), array('"' => '&quot;', '<' => '&lt;', '>' => '&gt;')) . '" />';
+<input type="hidden" name="' . htmlspecialchars($k) . '" value="' . strtr(stripslashes($v), array('"' => '&quot;', '<' => '&lt;', '>' => '&gt;')) . '" />';
         else
         {