phplist

NOTE:: Before reporting an issue, make sure you are running the latest version, currently 3.3.1


View Issue Details Jump to Notes ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0016724phplist applicationInterface - Administratorpublic16-11-12 21:4822-03-13 19:45
Reporteralpha1 
PrioritynormalSeveritytrivialReproducibilityalways
StatusresolvedResolutionfixed 
PlatformlinuxOSdebianOS Version
Product Version2.11.7 
Target Version2.11.8Fixed in Version2.11.8 
Summary0016724: List names ($row[$id] have not been stripped of slashes
DescriptionMinor things, but the lists on ?page=list (among other places) have slashes in them if they have ' or other characters.

Steps To ReproduceGo to admin/?page=list and have a list call like something like
"Craig's List" and you'll see "Craig\'s List"
Additional Informationadmin/list.php line 204

take this
  $element = '<!-- '.$row['id'].'-->'.$row['name'];
and turn it info this

  $element = '<!-- '.$row['id'].'-->'.stripslashes($row['name']);

to fix it at least on this page. Possibly the strip slashes should be done to the entire array though?
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]

-  Notes
There are no notes attached to this issue.


Copyright © 2000 - 2017 MantisBT Team
Powered by Mantis Bugtracker