浏览代码

Use the proper name in the form field

Zachary Kotlarek 13 年之前
父节点
当前提交
2de2a432ef
共有 1 个文件被更改,包括 1 次插入 和 1 次删除
  1. 1 1
      web/includes/display.php

+ 1 - 1
web/includes/display.php

@@ -24,7 +24,7 @@ function printSeries($series) {
 
 
 	# Form
 	# Form
 	echo '<form action="' . $_SERVER['PHP_SELF'] . '?series=' . urlencode($series) . '" method="post" data-ajax="false">';
 	echo '<form action="' . $_SERVER['PHP_SELF'] . '?series=' . urlencode($series) . '" method="post" data-ajax="false">';
-	echo '<input type="hidden" name="series" value="' . $series_html . '"/>';
+	echo '<input type="hidden" name="series" value="' . htmlspecialchars($series) . '"/>';
 
 
 	# Series flags
 	# Series flags
 	echo '<h2>Series Parameters</h2>';
 	echo '<h2>Series Parameters</h2>';