Project

General

Profile

« Previous | Next » 

Revision 656

Added by thorn almost 17 years ago

Added some missing add_slashes(), get_post_escaped(), and strip_tags() for $_POST, $_GET and $_REQUEST-data. Also for $_SERVER['PHP_SELF'].

View differences:

CHANGELOG
14 14
01-Feb-2008 Christian Sommer
15 15
#	Added default index.php to all folders to prevent directory spoofing
16 16
01-Feb-2008 Thomas Hornik
17
#	Added some missing add_slashes(), get_post_escaped(), and strip_tags() for $_POST, $_GET and $_REQUEST-data. Also for $_SERVER['PHP_SELF'].
17 18
#	Fixed possible XSS-vulnerability in wb/search/search.php
18 19
31-Jan-2008 Thomas Hornik
19 20
!	Adjusted clock-red icon to match wb colors

Also available in: Unified diff