修复 排行页面XSS漏洞
This commit is contained in:
parent
2b5b748b63
commit
52a1d1c41a
|
@ -170,7 +170,7 @@ function getranklist_members($offset = 0, $limit = 20) {
|
||||||
$topusers = C::t('home_show')->fetch_all_by_unitprice($offset, $limit, true);
|
$topusers = C::t('home_show')->fetch_all_by_unitprice($offset, $limit, true);
|
||||||
foreach($topusers as $member) {
|
foreach($topusers as $member) {
|
||||||
$member['avatar'] = avatar($member['uid'], 'small');
|
$member['avatar'] = avatar($member['uid'], 'small');
|
||||||
$member['note'] = dhtmlspecialchars(dhtmlspecialchars($member['note']));
|
$member['note'] = htmlspecialchars(dhtmlspecialchars($member['note']));
|
||||||
$members[] = $member;
|
$members[] = $member;
|
||||||
}
|
}
|
||||||
return $members;
|
return $members;
|
||||||
|
|
Loading…
Reference in New Issue