|
26 | 26 | } else { |
27 | 27 | echo "<tr class='expanded $i'>"; |
28 | 28 | } |
29 | | - $_uid = htmlspecialchars($uid); |
| 29 | + $uid_escaped = htmlspecialchars($uid); |
30 | 30 | $fullname = htmlspecialchars($attributes["gecos"][0]); |
31 | 31 | $mail = htmlspecialchars($attributes["mail"][0]); |
32 | | - $gid = htmlspecialchars($group->gid); |
| 32 | + $gid_escaped = htmlspecialchars($group->gid); |
33 | 33 | echo "<td>$fullname</td>"; |
34 | | - echo "<td>$_uid</td>"; |
| 34 | + echo "<td>$uid_escaped</td>"; |
35 | 35 | echo "<td><a href='mailto:$mail'>$mail</a></td>"; |
36 | 36 | echo "<td>"; |
37 | 37 | $CSRFTokenHiddenFormInput = UnityHTTPD::getCSRFTokenHiddenFormInput(); |
|
40 | 40 | action='' |
41 | 41 | method='POST' |
42 | 42 | onsubmit=' |
43 | | - return confirm(\"Are you sure you want to remove $_uid from this group?\"); |
| 43 | + return confirm(\"Are you sure you want to remove $uid_escaped from this group?\"); |
44 | 44 | ' |
45 | 45 | > |
46 | 46 | $CSRFTokenHiddenFormInput |
47 | 47 | <input type='hidden' name='form_type' value='remUserChild'> |
48 | | - <input type='hidden' name='uid' value='$_uid'> |
49 | | - <input type='hidden' name='pi' value='$gid'> |
| 48 | + <input type='hidden' name='uid' value='$uid_escaped'> |
| 49 | + <input type='hidden' name='pi' value='$gid_escaped'> |
50 | 50 | <input type='submit' value='Remove'> |
51 | 51 | </form> |
52 | 52 | "; |
|
62 | 62 | echo "<tr class='expanded $i'>"; |
63 | 63 | } |
64 | 64 | $name = htmlspecialchars($user->getFullName()); |
65 | | - $uid = htmlspecialchars($user->uid); |
| 65 | + $uid_escaped = htmlspecialchars($user->uid); |
66 | 66 | $email = htmlspecialchars($user->getMail()); |
67 | | - $gid = htmlspecialchars($group->gid); |
| 67 | + $gid_escaped = htmlspecialchars($group->gid); |
68 | 68 | echo "<td>$name</td>"; |
69 | | - echo "<td>$uid</td>"; |
| 69 | + echo "<td>$uid_escaped</td>"; |
70 | 70 | echo "<td><a href='mailto:$email'>$email</a></td>"; |
71 | 71 | echo "<td>"; |
72 | 72 | $CSRFTokenHiddenFormInput = UnityHTTPD::getCSRFTokenHiddenFormInput(); |
73 | 73 | echo |
74 | 74 | "<form action='' method='POST' |
75 | | - onsubmit='return confirm(\"Are you sure you want to approve $uid ?\");'> |
| 75 | + onsubmit='return confirm(\"Are you sure you want to approve $uid_escaped ?\");'> |
76 | 76 | $CSRFTokenHiddenFormInput |
77 | 77 | <input type='hidden' name='form_type' value='reqChild'> |
78 | | - <input type='hidden' name='uid' value='$uid'> |
79 | | - <input type='hidden' name='pi' value='$gid'> |
| 78 | + <input type='hidden' name='uid' value='$uid_escaped'> |
| 79 | + <input type='hidden' name='pi' value='$gid_escaped'> |
80 | 80 | <input type='submit' name='action' value='Approve'> |
81 | 81 | <input type='submit' name='action' value='Deny'></form>"; |
82 | 82 | echo "</td>"; |
|
0 commit comments