diff options
Diffstat (limited to 'server/functions.php')
| -rw-r--r-- | server/functions.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/server/functions.php b/server/functions.php index 7706beca..7939f2ff 100644 --- a/server/functions.php +++ b/server/functions.php @@ -1077,7 +1077,7 @@ function keepGet($current, $no_get) { foreach($sanitized as &$get_var) { $get_var = preg_replace_callback( '/^(.*=)(.+)$/', - function($m) { $data = urldecode($m[2]); return '&' . $m[1] . urlencode($data); }, + function($m) { $data = htmlentities(urldecode($m[2])); return '&' . htmlentities($m[1]) . urlencode($data); }, $get_var ); } |