From: Tim Starling Date: Sun, 1 Oct 2006 04:40:27 +0000 (+0000) Subject: escaping for $path, call me paranoid X-Git-Tag: 1.31.0-rc.0~55682 X-Git-Url: https://git.cyclocoop.org/%7B%24www_url%7Dadmin/compta/banques/%7B%7B%20url_for%28%27admin_users%27%29%20%7D%7D?a=commitdiff_plain;h=7ca56e9c709d81efab8d7a34d72611e089ea1b6d;p=lhc%2Fweb%2Fwiklou.git escaping for $path, call me paranoid --- diff --git a/includes/templates/NoLocalSettings.php b/includes/templates/NoLocalSettings.php index 22ce534235..e71dd396fa 100644 --- a/includes/templates/NoLocalSettings.php +++ b/includes/templates/NoLocalSettings.php @@ -9,7 +9,7 @@ if ( isset( $wgVersion ) ) { # Could use but then we have to worry about http[s]/port #/etc. $path = ''; if( isset( $_SERVER['SCRIPT_NAME'] )) { - $path = preg_replace('/index.php/', '', $_SERVER['SCRIPT_NAME']); + $path = htmlspecialchars( preg_replace('/index.php/', '', $_SERVER['SCRIPT_NAME']) ); } ?> @@ -31,7 +31,7 @@ if( isset( $_SERVER['SCRIPT_NAME'] )) { - The MediaWiki logo

MediaWiki

@@ -39,7 +39,7 @@ if( isset( $_SERVER['SCRIPT_NAME'] )) { if ( file_exists( 'config/LocalSettings.php' ) ) { echo( 'To complete the installation, move config/LocalSettings.php to the parent directory.' ); } else { - echo( "Please set up the wiki first." ); + echo( "Please set up the wiki first." ); } ?>