From b2f8749f8bf792ad5f11c17f8d52ce8a11a7b6b5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bernhard=20Fr=C3=B6hlich?= <bernhard@cacert.org>
Date: Tue, 2 Aug 2011 21:08:02 +0200
Subject: comments field textedit field adjusted Uli60 proposal

---
 pages/account/32.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
 mode change 100644 => 100755 pages/account/32.php

(limited to 'pages/account/32.php')

diff --git a/pages/account/32.php b/pages/account/32.php
old mode 100644
new mode 100755
index 00dc1ea..a05c927
--- a/pages/account/32.php
+++ b/pages/account/32.php
@@ -38,10 +38,10 @@
 		$user = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='".intval($row['memid'])."'"));
 ?>
   <tr>
-    <td class="DataTD"><a href='mailto:<?=$user['email']?>'><?=($user['fname'])?> <?=($user['lname'])?></a></td>
+    <td class="DataTD"><a href='mailto:<?=sanitizeHTML($user['email'])?>'><?=sanitizeHTML($user['fname'])?> <?=sanitizeHTML($user['lname'])?></a></td>
     <td class="DataTD"><?=($row['masteracc'])?></a></td>
-    <td class="DataTD"><?=($row['OU'])?></a></td>
-    <td class="DataTD"><?=($row['comments'])?></a></td>
+    <td class="DataTD"><?=sanitizeHTML($row['OU'])?></a></td>
+    <td class="DataTD"><?=sanitizeHTML($row['comments'])?></a></td>
 <? if($row['masteracc'] == 0 || $_SESSION['profile']['orgadmin'] == 1) { ?>
     <td class="DataTD"><a href="account.php?id=34&amp;orgid=<?=$row['orgid']?>&amp;memid=<?=$row['memid']?>"><?=_("Delete")?></a></td>
 <? } else { ?>
-- 
cgit v1.2.1