Escape output on file upload messages

2020-08-04 08:51:55 +02:00 · 2020-08-04 08:51:55 +02:00 · db03bb6c1a
parent 79b5d815d6
commit db03bb6c1a
2 changed files with 2 additions and 2 deletions
--- a/examples/send_file_upload.phps
+++ b/examples/send_file_upload.phps
@ -48,7 +48,7 @@ if (array_key_exists('userfile', $_FILES)) {
        <input type="submit" value="Send File">
    </form>
 <?php } else {
-    echo $msg;
+    echo htmlspecialchars($msg);
 } ?>
 </body>
 </html>
--- a/examples/send_multiple_file_upload.phps
+++ b/examples/send_multiple_file_upload.phps
@ -49,7 +49,7 @@ if (array_key_exists('userfile', $_FILES)) {
        <input type="submit" value="Send Files">
    </form>
 <?php } else {
-    echo $msg;
+    echo htmlspecialchars($msg);
 } ?>
 </body>
 </html>