[TEP-COMMIT] CVS: catalog/catalog/includes/functions html_output.php,1.58,1.59

Update of /cvsroot/tep/catalog/catalog/includes/functions
In directory sc8-pr-cvs1:/tmp/cvs-serv2024/includes/functions

Modified Files:
	html_output.php 
Log Message:
wrap the session ID around tep_output_string() to close a cross site
scripting possibility


Index: html_output.php
===================================================================
RCS file: /cvsroot/tep/catalog/catalog/includes/functions/html_output.php,v
retrieving revision 1.58
retrieving revision 1.59
diff -u -d -r1.58 -r1.59
--- html_output.php	17 Nov 2003 18:50:25 -0000	1.58
+++ html_output.php	17 Dec 2003 15:30:01 -0000	1.59
@@ -63,7 +63,7 @@
     }
 
     if (isset($_sid)) {
-      $link .= $separator . $_sid;
+      $link .= $separator . tep_output_string($_sid);
     }
 
     return $link;



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click