iSharkFly-Open
/
DiscuzX
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

修复 排行页面XSS漏洞

This commit is contained in:
Comsenz 2018-10-12 15:13:27 +08:00
parent 864c819506
commit 2b5b748b63
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
upload/source/module/misc/misc_ranklist.php
View File

@ -170,7 +170,7 @@ function getranklist_members($offset = 0, $limit = 20) {
$topusers = C::t('home_show')->fetch_all_by_unitprice($offset, $limit, true); $topusers = C::t('home_show')->fetch_all_by_unitprice($offset, $limit, true);
foreach($topusers as $member) { foreach($topusers as $member) {
$member['avatar'] = avatar($member['uid'], 'small'); $member['avatar'] = avatar($member['uid'], 'small');
$member['note'] = dhtmlspecialchars($member['note']); $member['note'] = dhtmlspecialchars(dhtmlspecialchars($member['note']));
$members[] = $member; $members[] = $member;
} }
return $members; return $members;