Security fixes

This commit is contained in:
nemunaire 2016-07-17 10:22:51 +02:00
commit dc2a338847
5 changed files with 9 additions and 8 deletions

View file

@ -26,7 +26,7 @@ else
<article id="menu">.:
<form method="get" action="?" style="float: right;">
<?php if (isset($_GET["valid"])) echo '<input type="hidden" name="valid">'; ?>
<label for="filter">Filter par code de cours :</label> <input type="text" id="filter" name="filter" value="<?php echo $filter; ?>"> <input type="submit" value="Filtrer">
<label for="filter">Filtrer par code de cours :</label> <input type="text" id="filter" name="filter" value="<?php echo $filter; ?>"> <input type="submit" value="Filtrer">
</form>
<a href="?">Liste des questions non-validées</a> ::
<a href="?<?php if (isset($_GET["valid"])) echo "valid&amp;"; ?>report">Liste des questions rapportées</a> ::
@ -77,7 +77,7 @@ foreach($file->get_questions() as $q)
?>
<tr>
<td><acronym title="<?php echo $q->getCourse()->getName(); ?>"><?php echo $q->getCourse()->getCode(); ?></acronym></td>
<td><?php echo $q->getQuestion(); ?></td>
<td><?php echo htmlentities($q->getQuestion(), ENT_COMPAT, "UTF-8"); ?></td>
<td><?php if ($q->get_writer() != null) echo $q->get_writer()->getUsername(); ?></td>
<td><?php echo strftime("%d/%m/%y %H:%M", $q->getAddedTime()); ?></td>
<td><?php if ($q->get_validator() != null) echo $q->get_validator()->getUsername(); ?>