Security fixes

This commit is contained in:
nemunaire 2016-07-17 10:22:51 +02:00
commit dc2a338847
5 changed files with 9 additions and 8 deletions

View file

@ -21,13 +21,13 @@ else
?>
<p>
<strong>Cours concerné :</strong> <?php echo $question->getCourse()->getName(); ?><br><br>
<strong>Question posée :</strong> <?php echo $question->getQuestion(); ?><br><br>
<strong>Question posée :</strong> <?php echo htmlentities($question->getQuestion(), ENT_COMPAT, "UTF-8"); ?><br><br>
<strong>Réponses valides exhaustives :</strong>
</p>
<?php
echo "<ul>";
foreach($question->getAnswer() as $a)
echo "<li>".$a."</li>";
echo "<li>".htmlentities($a, ENT_COMPAT, "UTF-8")."</li>";
echo "</ul>";
if ($question->isValidation())
{
@ -37,7 +37,7 @@ if ($question->isValidation())
action="thanksRefused.php">
<label for="comment">Précisez les raisons de votre refus</label>
<input name="comment" type="textarea"
rows="5" cols="50" />
rows="5" cols="50">
<input type="hidden" name="id" value="<?php echo $question->getId() ?>">
<input type="submit" value="Refuser la question">