Fix reflected XSS in list_rankup.php

2018-03-25 17:29:15 +02:00
parent 52747fdce7
commit 2a43a3a446
1 changed files with 2 additions and 0 deletions
--- a/stats/list_rankup.php
+++ b/stats/list_rankup.php
@@ -144,6 +144,8 @@ if(!isset($_GET["user"])) {
 	$user_pro_seite = preg_replace('/\D/', '', $_GET["user"]);
 }

+$getstring = htmlspecialchars($getstring);
+
 $start = ($seite * $user_pro_seite) - $user_pro_seite;

 if ($keysort == 'active' && $keyorder == 'asc') {