Minahito
minah****@users*****
2005年 8月 25日 (木) 12:18:06 JST
Index: xoops2jp/html/modules/newbb/config.php diff -u xoops2jp/html/modules/newbb/config.php:1.2.12.1 xoops2jp/html/modules/newbb/config.php:1.2.12.2 --- xoops2jp/html/modules/newbb/config.php:1.2.12.1 Sun Aug 21 13:16:54 2005 +++ xoops2jp/html/modules/newbb/config.php Thu Aug 25 12:18:06 2005 @@ -1,5 +1,5 @@ <?php -// $Id: config.php,v 1.2.12.1 2005/08/21 04:16:54 nobunobu Exp $ +// $Id: config.php,v 1.2.12.2 2005/08/25 03:18:06 minahito Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -41,9 +41,8 @@ $bbCookie['domain'] = ""; // It should be safe to leave these alone as well. -$bbCookie['path'] = str_replace(basename($_SERVER['PHP_SELF']),"",$_SERVER['PHP_SELF']); +$bbCookie['path'] = htmlspecialchars(str_replace(basename($_SERVER['PHP_SELF']),"",$_SERVER['PHP_SELF']),ENT_QUOTES); $bbCookie['secure'] = false; - /* -- You shouldn't have to change anything after this point */ /* -- Images -- */ $bbImage['post'] = $bbUrl['images']."/post.gif"; Index: xoops2jp/html/modules/newbb/topicmanager.php diff -u xoops2jp/html/modules/newbb/topicmanager.php:1.2.12.1 xoops2jp/html/modules/newbb/topicmanager.php:1.2.12.2 --- xoops2jp/html/modules/newbb/topicmanager.php:1.2.12.1 Sun Aug 21 13:16:54 2005 +++ xoops2jp/html/modules/newbb/topicmanager.php Thu Aug 25 12:18:06 2005 @@ -6,7 +6,7 @@ copyright : (C) 2001 The phpBB Group email : suppo****@phpbb***** - $Id: topicmanager.php,v 1.2.12.1 2005/08/21 04:16:54 nobunobu Exp $ + $Id: topicmanager.php,v 1.2.12.2 2005/08/25 03:18:06 minahito Exp $ ***************************************************************************/ @@ -142,7 +142,7 @@ } } else { // No submit $mode = $_GET['mode']; - echo "<form action='".$_SERVER['PHP_SELF']."' method='post'> + echo "<form action='".xoops_getenv('PHP_SELF')."' method='post'> <table border='0' cellpadding='1' cellspacing='0' align='center' width='95%'><tr><td class='bg2'> <table border='0' cellpadding='1' cellspacing='1' width='100%'> <tr class='bg3' align='left'>";