htmlentities -> htmlspecialchars
This commit is contained in:
@@ -15,7 +15,7 @@ if(isset($_POST['user_id'])){
|
||||
$ip=$_POST['ip'];
|
||||
$sql="insert into loginlog (user_id,password,ip,time) value(?,?,?,now())";
|
||||
$result=pdo_query($sql,$user_id,"set ip by ".$_SESSION[$OJ_NAME."_user_id"],$ip);
|
||||
echo "$MSG_USER ".htmlentities($user_id)." $MSG_SET_LOGIN_IP : ".htmlentities($ip);
|
||||
echo "$MSG_USER ".htmlspecialchars($user_id)." $MSG_SET_LOGIN_IP : ".htmlspecialchars($ip);
|
||||
}
|
||||
?>
|
||||
<form action=user_set_ip.php class=center method="post">
|
||||
|
||||
Reference in New Issue
Block a user