AC-4804: Security fixes for XSS, possible sql injection on multiple scripts within...

[acontent.git] / docs / themes / default / user / user_group_create_edit.tmpl.php

diff --git a/docs/themes/default/user/user_group_create_edit.tmpl.php b/docs/themes/default/user/user_group_create_edit.tmpl.php
index 006e8ed..1093703 100644 (file)
--- a/docs/themes/default/user/user_group_create_edit.tmpl.php
+++ b/docs/themes/default/user/user_group_create_edit.tmpl.php
@@ -16,7 +16,7 @@ $onload = "initial();";
 include(TR_INCLUDE_PATH.'header.inc.php');\r
 ?>\r
 \r
-<form name="input_form" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?><?php if (isset($_GET["id"])) echo '?id='.$_GET["id"]; ?>" >\r
+<form name="input_form" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?><?php if (isset($_GET["id"])) echo '?id='.intval($_GET["id"]); ?>" >\r
 <?php if (isset($this->user_group_row["user_group_id"])) {?>\r
 <input type="hidden" name="user_group_id" value="<?php echo $this->user_group_row["user_group_id"]; ?>" />\r
 <?php }?>\r
@@ -31,12 +31,12 @@ include(TR_INCLUDE_PATH.'header.inc.php');
 \r
                <tr>\r
                        <th align="left"><span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="title"><?php echo _AT('title'); ?></label></th>\r
-                       <td><input type="text" name="title" size="100" id="title" value="<?php if (isset($_POST['title'])) echo $_POST['title']; else echo $this->user_group_row["title"]; ?>" /></td>\r
+                       <td><input type="text" name="title" size="100" id="title" value="<?php if (isset($_POST['title'])) echo AT_print($_POST['title'], 'input.text'); else echo AT_print($this->user_group_row["title"], 'input.text'); ?>" /></td>\r
                </tr>\r
 \r
                <tr>\r
                        <th align="left"><label for="description"><?php echo _AT('description'); ?></label></th>\r
-                       <td><textarea rows="3" cols="30" name="description" id="description"><?php if (isset($_POST['description'])) echo $_POST['description']; else echo $this->user_group_row["description"]; ?></textarea></td>\r
+                       <td><textarea rows="3" cols="30" name="description" id="description"><?php if (isset($_POST['description'])) echo AT_print($_POST['description'], 'input.text'); else echo AT_print($this->user_group_row["description"], 'input.text'); ?></textarea></td>\r
                </tr>\r
 \r
                <?php if (isset($this->user_group_row['user_group_id'])) {?>\r