13 lines
652 B
Plaintext
Raw Normal View History

$OpenBSD: patch-delete_form_php,v 1.1 2006/05/21 19:15:08 aanriot Exp $
--- delete_form.php.orig Sun May 21 13:29:00 2006
+++ delete_form.php Sun May 21 13:30:34 2006
@@ -69,7 +69,7 @@ include './header.php'; ?>
<td>
<center>
<form action="rdelete.php" method="post">
- <input type="hidden" name="dn" value="<?php echo $dn; ?>" />
+ <input type="hidden" name="dn" value="<?php echo htmlspecialchars($dn); ?>" />
<input type="hidden" name="server_id" value="<?php echo $ldapserver->server_id; ?>" />
<input type="submit" class="scary" value="<?php echo sprintf( $lang['delete_all_x_objects'], $sub_tree_count ); ?>" />
</form>