| Index: trunk/phase3/profileinfo.php |
| — | — | @@ -65,7 +65,8 @@ |
| 66 | 66 | <?php |
| 67 | 67 | |
| 68 | 68 | if ( !$wgEnableProfileInfo ) { |
| 69 | | - echo "disabled\n"; |
| | 69 | + echo "<p>Disabled</p>\n"; |
| | 70 | + echo "</body></html>"; |
| 70 | 71 | exit( 1 ); |
| 71 | 72 | } |
| 72 | 73 | |
| — | — | @@ -251,8 +252,8 @@ |
| 252 | 253 | if ( $_expand === false ) |
| 253 | 254 | $_expand = $expand; |
| 254 | 255 | |
| 255 | | - $nfilter = $_filter ? $_filter : $filter; |
| 256 | | - $nsort = $_sort ? $_sort : $sort; |
| | 256 | + $nfilter = $_filter ? htmlspecialchars( $_filter ) : htmlspecialchars( $filter ); |
| | 257 | + $nsort = $_sort ? htmlspecialchars( $_sort ) : htmlspecialchars( $sort ); |
| 257 | 258 | $exp = urlencode( implode( ',', array_keys( $_expand ) ) ); |
| 258 | 259 | return "?filter=$nfilter&sort=$nsort&expand=$exp"; |
| 259 | 260 | } |