XSS in login form

13 years ago · c7d72306ed
1 changed files with 1 additions and 1 deletions
--- a/inc/display.php
+++ b/inc/display.php
@ -99,7 +99,7 @@
 			'body'=>Element('login.html', Array(
 				'config'=>$config,
 				'error'=>$error,
-				'username'=>$username,
+				'username'=>utf8tohtml($username),
 				'redirect'=>$redirect
 				)
 			)