diff --git a/www/header.php b/www/header.php index ae4041e..511c606 100644 --- a/www/header.php +++ b/www/header.php @@ -76,7 +76,7 @@ if (!preg_match("~^(?:f|ht)tps?://~i", $data[3])) { echo ' '; // display the link - echo $urllink . '"> '; // display the link + echo htmlspecialchars_decode($urllink ) . '"> '; // display the link echo $data[2] . '

'; // display the link title and close the a href and first cell, open the second cell echo $data[5] . " "; // OPTIONAL: display the description column echo $data[7] . " "; // display the score and close the second cell, open the third cell diff --git a/www/submit.php b/www/submit.php index 63283cc..edfd9ff 100644 --- a/www/submit.php +++ b/www/submit.php @@ -1,8 +1,10 @@ '],'', $_POST['link']); + // Clear user input + $link = htmlspecialchars($link); $name = htmlspecialchars($_POST['name']); $description = htmlspecialchars($_POST['description']); $sensitive = htmlspecialchars($_POST['sensitive']); @@ -33,7 +35,7 @@ if (isset($_POST['submit'])){ fclose($file); } else { // Handle error opening the file - errorlog("Error opening the file."); + error_log("Error opening the file."); } echo "Link Successfully Submitted"; }