修复 排行页面XSS漏洞

This commit is contained in:
Comsenz 2018-10-12 15:13:27 +08:00
parent 2b5b748b63
commit 52a1d1c41a
1 changed files with 1 additions and 1 deletions

View File

@ -170,7 +170,7 @@ function getranklist_members($offset = 0, $limit = 20) {
$topusers = C::t('home_show')->fetch_all_by_unitprice($offset, $limit, true); $topusers = C::t('home_show')->fetch_all_by_unitprice($offset, $limit, true);
foreach($topusers as $member) { foreach($topusers as $member) {
$member['avatar'] = avatar($member['uid'], 'small'); $member['avatar'] = avatar($member['uid'], 'small');
$member['note'] = dhtmlspecialchars(dhtmlspecialchars($member['note'])); $member['note'] = htmlspecialchars(dhtmlspecialchars($member['note']));
$members[] = $member; $members[] = $member;
} }
return $members; return $members;