Skip to content

Commit

Permalink
Fix low severity stored XSS vulnerability in membership_profile.php
Browse files Browse the repository at this point in the history
  • Loading branch information
Ahmad Gneady committed Jul 1, 2021
1 parent ccc50f1 commit 7167fbd
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions app/membership_profile.php
Expand Up @@ -133,13 +133,13 @@
<fieldset id="profile">
<div class="form-group">
<label for="email"><?php echo $Translation['email']; ?></label>
<input type="email" id="email" name="email" value="<?php echo $mi['email']; ?>" class="form-control">
<input type="email" id="email" name="email" value="<?php echo html_attr($mi['email']); ?>" class="form-control">
</div>

<?php for($i=1; $i<5; $i++) { ?>
<div class="form-group">
<label for="custom<?php echo $i; ?>"><?php echo $adminConfig['custom'.$i]; ?></label>
<input type="text" id="custom<?php echo $i; ?>" name="custom<?php echo $i; ?>" value="<?php echo $mi['custom'][$i-1]; ?>" class="form-control">
<input type="text" id="custom<?php echo $i; ?>" name="custom<?php echo $i; ?>" value="<?php echo html_attr($mi['custom'][$i-1]); ?>" class="form-control">
</div>
<?php } ?>

Expand Down

0 comments on commit 7167fbd

Please sign in to comment.