From 8c8181f2709832c11173006e48148d209e98fdc2 Mon Sep 17 00:00:00 2001
From: Comsenz <10433182@qq.com>
Date: Fri, 17 Mar 2017 12:56:58 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=20=E9=81=93=E5=85=B7?=
 =?UTF-8?q?=E7=9A=84XSS=E6=BC=8F=E6=B4=9E=E4=B8=80=E5=A4=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 upload/source/class/magic/magic_doodle.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/upload/source/class/magic/magic_doodle.php b/upload/source/class/magic/magic_doodle.php
index 9fad649..f092b43 100644
--- a/upload/source/class/magic/magic_doodle.php
+++ b/upload/source/class/magic/magic_doodle.php
@@ -38,13 +38,13 @@ class magic_doodle {
 	function show() {
 		global $_G;
 		magicshowtips(lang('magic/doodle', 'doodle_info'));
-		echo <<<SCRIPT
+		echo '
 <p>
-	<input type="hidden" name="showid" value="$_GET[showid]" />
-	<input type="hidden" name="mtarget" value="$_GET[target]" />
-	<input type="hidden" name="from" value="$_GET[from]" />
+	<input type="hidden" name="showid" value="'.htmlspecialchars($_GET[showid]).'" />
+	<input type="hidden" name="mtarget" value="'.htmlspecialchars($_GET[target]).'" />
+	<input type="hidden" name="from" value="'.htmlspecialchars($_GET[from]).'" />
 </p>
-SCRIPT;
+';
 	}
 
 }