From cf5b733f54fbf9d4a276f621c720582408cb043c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=BC=A0=E6=B5=A9=E6=96=8C?= Date: Sat, 9 Jul 2016 09:37:21 +0800 Subject: [PATCH] Update status.php --- trunk/web/status.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/trunk/web/status.php b/trunk/web/status.php index 2309a12617c..a644328787a 100644 --- a/trunk/web/status.php +++ b/trunk/web/status.php @@ -82,7 +82,7 @@ if (isset($_GET['problem_id'])&&$_GET['problem_id']!=""){ if(isset($_GET['cid'])){ - $problem_id=$_GET['problem_id']; + $problem_id=htmlentities($_GET['problem_id'],ENT_QUOTES,'UTF-8'); $num=strpos($PID,$problem_id); $sql=$sql."AND `num`='".$num."' "; $str2=$str2."&problem_id=".$problem_id;