修复漏洞一处

2017-02-14 09:24:19 +08:00 · 2017-02-14 09:24:19 +08:00 · 89da17177a
parent 03fe5cc9e2
commit 89da17177a
1 changed files with 1 additions and 1 deletions
--- a/upload/template/default/home/space_pm.htm
+++ b/upload/template/default/home/space_pm.htm
@ -363,7 +363,7 @@
 						<tr>
 							<th>{lang ignore_list}</th>
 							<td>
-								<textarea id="ignorelist" name="ignorelist" cols="40" rows="3" class="pt" onkeydown="ctrlEnter(event, 'ignoresubmit');">$ignorelist</textarea>
+								<textarea id="ignorelist" name="ignorelist" cols="40" rows="3" class="pt" onkeydown="ctrlEnter(event, 'ignoresubmit');">{echo htmlspecialchars($ignorelist)}</textarea>
 								<div class="d">{lang ignore_member_pm_message}</div>
 							</td>
 						</tr>