Update status.php

zhblue · Jul 9, 2016 · 83370d7 · 83370d7
1 parent 01826d7
commit 83370d7
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/trunk/web/template/sae/status.php b/trunk/web/template/sae/status.php
@@ -16,11 +16,11 @@
 <?php 
 ?>
 <form id=simform action="status.php" method="get">
-<?php echo $MSG_PROBLEM_ID?>:<input class="input-mini" style="height:24px" type=text size=4 name=problem_id value='<?php echo $problem_id?>'>
-<?php echo $MSG_USER?>:<input class="input-mini" style="height:24px" type=text size=4 name=user_id value='<?php echo $user_id?>'>
+<?php echo $MSG_PROBLEM_ID?>:<input class="input-mini" style="height:24px" type=text size=4 name=problem_id value='<?php echo htmlentities($problem_id,ENT_QUOTES,'UTF-8')?>'>
+<?php echo $MSG_USER?>:<input class="input-mini" style="height:24px" type=text size=4 name=user_id value='<?php echo htmlentities($user_id,ENT_QUOTES,'UTF-8')?>'>
 <?php if (isset($cid)) echo "<input type='hidden' name='cid' value='$cid'>";?>
 <?php echo $MSG_LANG?>:<select class="input-small" size="1" name="language">
-<?php if (isset($_GET['language'])) $language=$_GET['language'];
+<?php if (isset($_GET['language'])) $language=intval($_GET['language']);
 else $language=-1;
 if ($language<0||$language>=count($language_name)) $language=-1;
 if ($language==-1) echo "<option value='-1' selected>All</option>";