Escape request and database values in forms and links.
Add form_value() in html.lib.php.
This commit is contained in:
@@ -1,5 +1,6 @@
|
||||
<?php
|
||||
require_once(realpath(dirname(__FILE__) . '/open_db.lib.php'));
|
||||
require_once(__DIR__ . '/html.lib.php');
|
||||
|
||||
$is_admin = FALSE;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user