Update status.php

zhblue · Jul 9, 2016 · cf5b733 · cf5b733
1 parent 83370d7
commit cf5b733
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/trunk/web/status.php b/trunk/web/status.php
@@ -82,7 +82,7 @@
 if (isset($_GET['problem_id'])&&$_GET['problem_id']!=""){
 
 	if(isset($_GET['cid'])){
-		$problem_id=$_GET['problem_id'];
+		$problem_id=htmlentities($_GET['problem_id'],ENT_QUOTES,'UTF-8');
 		$num=strpos($PID,$problem_id);
 		$sql=$sql."AND `num`='".$num."' ";
         $str2=$str2."&problem_id=".$problem_id;