diff --git a/bans.php b/bans.php index e866553..6c33a4c 100644 --- a/bans.php +++ b/bans.php @@ -44,7 +44,7 @@ $banlist = $cacheutils->getValue();
@@ -68,14 +68,14 @@ function getBanlist() { $user = censorIP((string)$ban['ip']); if (!empty($ban['lastnickname'])) - $user = (string)$ban['lastnickname']; + $user = htmlentities((string)$ban['lastnickname']); if (empty($user)) $user = "Unknown"; - $reason = $ban['reason']; - $invokername = (string)$ban['invokername']; + $reason = htmlentities((string)$ban['reason']); + $invokername = htmlentities((string)$ban['invokername']); $duration = $ban['duration']; $createdepoch = $ban['created']; $expiresepoch = $ban['created'] + $duration; diff --git a/include/adminlist.php b/include/adminlist.php index 9f1ba5d..ebf2faf 100644 --- a/include/adminlist.php +++ b/include/adminlist.php @@ -38,10 +38,10 @@ function getAdminList() { $groupicon = getGroupIcon($tsAdmin, $group); if ($groupicon) { - $icon = '' . $userInfo['client_nickname'] . '' . translate($lang["adminlist"]["status"]["offline"]) . '
'; + $offlineClients[] = '' . htmlentities($userInfo['client_nickname']) . '' . translate($lang["adminlist"]["status"]["offline"]) . '
'; continue; } - $onlineClients[] = '
' . '' . $user . '' . ($user['client_away'] ? '' . translate($lang["adminlist"]["status"]["away"]) . '' : '' . translate($lang["adminlist"]["status"]["online"]) . '') . '
' . '' . htmlentities($user) . '' . ($user['client_away'] ? '' . translate($lang["adminlist"]["status"]["away"]) . '' : '' . translate($lang["adminlist"]["status"]["online"]) . '') . '
- ts-website v 1.4.4.3 — © Wruczek 2016 - 2017 + ts-website v 1.4.5 — © Wruczek 2016 - 2017
diff --git a/include/modulecheck.php b/include/modulecheck.php index d885e08..fee32a0 100644 --- a/include/modulecheck.php +++ b/include/modulecheck.php @@ -89,7 +89,7 @@ function showError($title, $text) { ?>