WordPress.org
Get WordPress

Plugin Directory

Changeset 2386845


Ignore:
Timestamp:
09/23/2020 06:48:28 AM (5 years ago)
Author:
onwebchat_dev
Message:

security fix

Location:
onwebchat
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • onwebchat/tags/3.2.0/onwebchat.php

    r2384872 r2386845  
    251251
    252252                <div class="username-div">
    253                     <strong>Email: </strong><input class="username-text-field" type="text" name="onWebChatUser" value="<?php echo get_option( 'onwebchat_plugin_option_user' ); ?>"/>
    254                 </div>
     253                    <!-- sanitize user-provided parameter -->
     254                    <strong>Email: </strong><input class="username-text-field" type="text" name="onWebChatUser" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_user' )); ?>"/>
     255                </div>
     256
    255257                <div class="password-div">
    256258                    <strong>Password: </strong><input class="password-text-field" type="password" name="onWebChatPass" value="<?php echo get_option( 'onWebChatPass' ); ?>"/>

  • onwebchat/trunk/onwebchat.php

    r2384872 r2386845  
    251251
    252252                <div class="username-div">
    253                     <strong>Email: </strong><input class="username-text-field" type="text" name="onWebChatUser" value="<?php echo get_option( 'onwebchat_plugin_option_user' ); ?>"/>
    254                 </div>
     253                    <!-- sanitize user-provided parameter -->
     254                    <strong>Email: </strong><input class="username-text-field" type="text" name="onWebChatUser" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_user' )); ?>"/>
     255                </div>
     256
    255257                <div class="password-div">
    256258                    <strong>Password: </strong><input class="password-text-field" type="password" name="onWebChatPass" value="<?php echo get_option( 'onWebChatPass' ); ?>"/>
Note: See TracChangeset for help on using the changeset viewer.