Browse Source

Security issue: Adding Security::remove_XSS function

Julio Montoya 15 years ago
parent
commit
b4532555c8
1 changed files with 1 additions and 1 deletions
  1. 1 1
      main/inc/lib/tracking.lib.php

+ 1 - 1
main/inc/lib/tracking.lib.php

@@ -1443,7 +1443,7 @@ class TrackingCourseLog {
 		// the form elements for the $_GET parameters (because the form is passed through GET
 		foreach ($_GET as $key=>$value){
 			if ($key <> 'additional_profile_field')	{
-				$return .= '<input type="hidden" name="'.$key.'" value="'.Security::remove_XSS($value).'" />';
+				$return .= '<input type="hidden" name="'.Security::remove_XSS($key).'" value="'.Security::remove_XSS($value).'" />';
 			}
 		}
 		// the submit button