From db03bb6c1adcbb01a0250c22db8f3a962e372168 Mon Sep 17 00:00:00 2001
From: Marcus Bointon <marcus@synchromedia.co.uk>
Date: Tue, 4 Aug 2020 08:51:55 +0200
Subject: [PATCH] Escape output on file upload messages

---
 examples/send_file_upload.phps          | 2 +-
 examples/send_multiple_file_upload.phps | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/send_file_upload.phps b/examples/send_file_upload.phps
index efe0500a..31a60a75 100644
--- a/examples/send_file_upload.phps
+++ b/examples/send_file_upload.phps
@@ -48,7 +48,7 @@ if (array_key_exists('userfile', $_FILES)) {
         <input type="submit" value="Send File">
     </form>
 <?php } else {
-    echo $msg;
+    echo htmlspecialchars($msg);
 } ?>
 </body>
 </html>
\ No newline at end of file
diff --git a/examples/send_multiple_file_upload.phps b/examples/send_multiple_file_upload.phps
index 22907e4b..714dc0d9 100644
--- a/examples/send_multiple_file_upload.phps
+++ b/examples/send_multiple_file_upload.phps
@@ -49,7 +49,7 @@ if (array_key_exists('userfile', $_FILES)) {
         <input type="submit" value="Send Files">
     </form>
 <?php } else {
-    echo $msg;
+    echo htmlspecialchars($msg);
 } ?>
 </body>
 </html>