diff options
| author | Christopher Burger <burgerc@freeside.biz> | 2017-06-08 15:52:50 -0400 |
|---|---|---|
| committer | Christopher Burger <burgerc@freeside.biz> | 2017-06-08 15:52:50 -0400 |
| commit | 8df787434943b1004b478ef594cfa106a719e6f0 (patch) | |
| tree | a9a7ab951dd1d71a847694f1cc2e51f22df6f512 /ng_selfservice/services.php | |
| parent | 6e0f9bf522acce334318adea8ea0b003781f8272 (diff) | |
RT# 73993 - updated ng_selfservice/services.php and ng_selfservice/packages_change.php to only pass one cgi param pkgnum and escaped pkg_label
Diffstat (limited to 'ng_selfservice/services.php')
| -rw-r--r-- | ng_selfservice/services.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ng_selfservice/services.php b/ng_selfservice/services.php index 987e5826d..b81f5583a 100644 --- a/ng_selfservice/services.php +++ b/ng_selfservice/services.php @@ -33,7 +33,7 @@ extract($list_pkgs); $change_link = ''; if ( in_array("Change packages", $menu_disable) == 0) { - $change_link = '<a href="packages_change.php?pkgnum=' . $pkg['pkgnum'] . '&pkg=' . $pkg['pkg_label'] . '&pkgpart=' . $pkg['pkgpart'] . '&classnum=' . $pkg['classnum'] . '">[change]</a>'; + $change_link = '<a href="packages_change.php?pkgnum=' . $pkg['pkgnum'] . '">[change]</a>'; } ?> <TR> @@ -41,7 +41,7 @@ extract($list_pkgs); </TR> <TR> <? echo $td ?><? echo $change_link ?> </TD> - <? echo $td ?><? echo $pkg['pkg_label']; ?></TD> + <? echo $td ?><? echo htmlspecialchars($pkg['pkg_label']); ?></TD> <? echo $td ?> <FONT COLOR="#<? echo $pkg['statuscolor'] ?>"><B> <? echo ucfirst($pkg['status']); ?> |