guarantor name escaped in guarantee file
authorMatteo Nastasi (mop) <nastasi@alternativeoutput.com>
Sun, 4 Dec 2011 15:18:26 +0000 (16:18 +0100)
committerMatteo Nastasi (mop) <nastasi@alternativeoutput.com>
Sun, 4 Dec 2011 15:18:26 +0000 (16:18 +0100)
web/index_wr.php

index 43be553..3c97733 100644 (file)
@@ -212,7 +212,7 @@ else if ($argz[0] == 'warranty') {
     if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) {
       if (($fp = @fopen(LEGAL_PATH."/warrant.txt", 'a')) != FALSE) {
         /* Unix time | session | nickname | IP | where was | mesg */
-        fwrite($fp, sprintf("%ld|%s|%s|%s|\n", $curtime, $user->name, xcapelt(urldecode($cli_name)), xcapelt(urldecode($cli_email))));
+          fwrite($fp, sprintf("%ld|%s|%s|%s|\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_name)), xcapelt(urldecode($cli_email))));
         fclose($fp);
       }
       Warrant::unlock_data($wa_lock);