Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed XSS http://www.securityfocus.com/bid/37471/info

Browse Source
This commit is contained in:
real_nowhereman 2010-01-28 09:38:10 +00:00
parent 0a2c894aba
commit d25c3ca1e6
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
fp-interface/sharedtpls/contact.tpl
View File

@ -6,7 +6,7 @@
{validate id="content" message=$lang.contact.error.content append="error"} {validate id="content" message=$lang.contact.error.content append="error"}
<form id="contactform" method="post" <form id="contactform" method="post"
action="{$smarty.server.PHP_SELF}" action="{$smarty.const.BLOG_BASEURL}contact.php"
enctype="multipart/form-data"> enctype="multipart/form-data">
{include file='shared:errorlist.tpl'} {include file='shared:errorlist.tpl'}

2
fp-interface/sharedtpls/login.tpl
View File

@ -1,6 +1,6 @@
{include file=shared:errorlist.tpl} {include file=shared:errorlist.tpl}
<form id="login" method="post" action="{$smarty.server.PHP_SELF}" enctype="multipart/form-data"> <form id="login" method="post" action="{$smarty.const.BLOG_BASEURL}login.php" enctype="multipart/form-data">
<fieldset><legend>{$lang.login.fieldset1}</legend> <fieldset><legend>{$lang.login.fieldset1}</legend>
<p><label for="user">{$lang.login.user}</label><br /> <p><label for="user">{$lang.login.user}</label><br />
<input {$error.user|notempty:'class="field-error"'} type="text" name="user" id="user" {if $smarty.post.user}value="{$smarty.post.user|wp_specialchars:true}"{/if} /></p> <input {$error.user|notempty:'class="field-error"'} type="text" name="user" id="user" {if $smarty.post.user}value="{$smarty.post.user|wp_specialchars:true}"{/if} /></p>

2
fp-interface/sharedtpls/search.tpl
View File

@ -1,5 +1,5 @@
{include file=shared:errorlist.tpl} {include file=shared:errorlist.tpl}
<form id="search" method="get" action="{$smarty.server.PHP_SELF}" enctype="multipart/form-data"> <form id="search" method="get" action="{$smarty.const.BLOG_BASEURL}search.php" enctype="multipart/form-data">
<fieldset><legend>{$lang.search.fset1}</legend> <fieldset><legend>{$lang.search.fset1}</legend>
<p><label for="keywords">{$lang.search.keywords}</label><br /> <p><label for="keywords">{$lang.search.keywords}</label><br />