From e29271f2fb7e3490942f9f32684524348b254a9b Mon Sep 17 00:00:00 2001 From: jim-p Date: Fri, 1 May 2015 16:48:28 -0400 Subject: Encode server name before displaying back to the user. --- usr/local/www/system_authservers.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'usr/local/www/system_authservers.php') diff --git a/usr/local/www/system_authservers.php b/usr/local/www/system_authservers.php index e145e28..2588dda 100644 --- a/usr/local/www/system_authservers.php +++ b/usr/local/www/system_authservers.php @@ -82,7 +82,7 @@ if ($act == "del") { /* Remove server from temp list used later on this page. */ unset($a_server[$_GET['id']]); - $savemsg = gettext("Authentication Server")." {$serverdeleted} ". + $savemsg = gettext("Authentication Server")." ". htmlspecialchars($serverdeleted) ." ". gettext("deleted")."
"; write_config($savemsg); } -- cgit v1.1