Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:43523
Return-Path: <stefan.esser@sektioneins.de>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 31496 invoked from network); 27 Mar 2009 19:01:57 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 27 Mar 2009 19:01:57 -0000
Authentication-Results: pb1.pair.com header.from=stefan.esser@sektioneins.de; sender-id=unknown
Authentication-Results: pb1.pair.com smtp.mail=stefan.esser@sektioneins.de; spf=permerror; sender-id=unknown
Received-SPF: error (pb1.pair.com: domain sektioneins.de from 85.214.103.31 cause and error)
X-PHP-List-Original-Sender: stefan.esser@sektioneins.de
X-Host-Fingerprint: 85.214.103.31 h1332034.stratoserver.net Linux 2.6
Received: from [85.214.103.31] ([85.214.103.31:5933] helo=h1332034.stratoserver.net)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 62/87-30978-2A22DC94 for <internals@lists.php.net>; Fri, 27 Mar 2009 14:01:56 -0500
Received: from Very-Black-Mac.local (xdsl-78-34-17-73.netcologne.de [78.34.17.73])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client did not present a certificate)
	by h1332034.stratoserver.net (Postfix) with ESMTP id 69481A2437D;
	Fri, 27 Mar 2009 19:51:29 +0100 (CET)
Message-ID: <49CD2334.4070207@sektioneins.de>
Date: Fri, 27 Mar 2009 20:04:20 +0100
User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302)
MIME-Version: 1.0
To: =?ISO-8859-1?Q?Josef_S=28im=E1nek?= <retricek@gmail.com>
CC: internals@lists.php.net
References: <744ffb620903271040t6f260e6bp893b6219f095e9fa@mail.gmail.com> <744ffb620903271121g51290b9amdc26116280aec055@mail.gmail.com>
In-Reply-To: <744ffb620903271121g51290b9amdc26116280aec055@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Re: Bug #40698 Re-use search term in the quicksearch
 input field
From: stefan.esser@sektioneins.de (Stefan Esser)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Josef,

before you want to commit something to the PHP bugs website, you should
recheck your code for obvious XSS bugs in it...

> +        <input class="small" type="text" name="search_for"
> value="<?php if(isset($_GET['search_for'])) echo $_GET['search_for'];
> ?>" size="30" />

Greets,
Stefan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknNIzMACgkQSuF5XhWr2njSZwCfTsKMpEM+/q4w8jwx8w2rqLFt
EHIAnjpNDsqAS0MdERmWNUHETS2QXLHQ
=477X
-----END PGP SIGNATURE-----