[geeklog-cvs] geeklog-1.3/public_html usersettings.php,1.70.2.1,1.70.2.2

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv9502

Modified Files:
      Tag: geeklog_1_3_8_1_1
	usersettings.php 
Log Message:
Throwing in a few htmlspecialchars() calls can't hurt ...


Index: usersettings.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/usersettings.php,v
retrieving revision 1.70.2.1
retrieving revision 1.70.2.2
diff -C2 -d -r1.70.2.1 -r1.70.2.2
*** usersettings.php	23 Jan 2004 10:11:02 -0000	1.70.2.1
--- usersettings.php	24 Jan 2004 14:41:20 -0000	1.70.2.2
***************
*** 106,111 ****
          $preferences->set_var ('enctype', '');
      }
!     $preferences->set_var ('fullname_value', $A['fullname']);
!     $preferences->set_var ('new_username_value', $_USER['username']);
      $preferences->set_var ('password_value', $A['passwd']);
      if ($_CONF['allow_username_change'] == 1) {
--- 106,112 ----
          $preferences->set_var ('enctype', '');
      }
!     $preferences->set_var ('fullname_value', htmlspecialchars ($A['fullname']));
!     $preferences->set_var ('new_username_value',
!                            htmlspecialchars ($_USER['username']));
      $preferences->set_var ('password_value', $A['passwd']);
      if ($_CONF['allow_username_change'] == 1) {
***************
*** 121,127 ****
      $preferences->set_var ('cooktime_selector', $selection);
  
!     $preferences->set_var ('email_value', $A['email']);
!     $preferences->set_var ('homepage_value', COM_killJS ($A['homepage']));
!     $preferences->set_var ('signature_value', $A['sig']);
  
      if ($_CONF['allow_user_photo'] == 1) {
--- 122,129 ----
      $preferences->set_var ('cooktime_selector', $selection);
  
!     $preferences->set_var ('email_value', htmlspecialchars ($A['email']));
!     $preferences->set_var ('homepage_value',
!                            htmlspecialchars (COM_killJS ($A['homepage'])));
!     $preferences->set_var ('signature_value', htmlspecialchars ($A['sig']));
  
      if ($_CONF['allow_user_photo'] == 1) {
***************
*** 150,157 ****
                                    'username', $username);
  
!     $preferences->set_var ('about_value', $A['about']);
!     $preferences->set_var ('pgpkey_value', $A['pgpkey']);
      $preferences->set_var ('uid_value', $reqid);
!     $preferences->set_var ('username_value', $_USER['username']);
  
      if ($_CONF['allow_account_delete'] == 1) {
--- 152,160 ----
                                    'username', $username);
  
!     $preferences->set_var ('about_value', htmlspecialchars ($A['about']));
!     $preferences->set_var ('pgpkey_value', htmlspecialchars ($A['pgpkey']));
      $preferences->set_var ('uid_value', $reqid);
!     $preferences->set_var ('username_value',
!                            htmlspecialchars ($_USER['username']));
  
      if ($_CONF['allow_account_delete'] == 1) {