% $cgi->param('error', $error);
<% $cgi->redirect(popurl(2). "recharge_svc.html?". $cgi->query_string ) %>
%} else {
-<% header("Package recharged") %>
+<& /elements/header-popup.html, "Package recharged" &>
<SCRIPT TYPE="text/javascript">
- window.top.location.reload();
+ topreload();
</SCRIPT>
</BODY></HTML>
%}
#untaint prepaid
my $prepaid = $cgi->param('prepaid');
+$prepaid =~ s/\W//g;
$prepaid =~ /^(\w*)$/;
$prepaid = $1;