From: Chris Fulljames Date: Sun, 10 May 2026 21:48:29 +0000 (-0400) Subject: Fix escaping and URL prefix X-Git-Url: https://littlesong.place/gitweb/?a=commitdiff_plain;h=a5722014c0319689a76969dcbaea7374a606998e;p=swapshop.git Fix escaping and URL prefix --- diff --git a/index.php b/index.php index f99c444..9961194 100755 --- a/index.php +++ b/index.php @@ -5,7 +5,7 @@ $event = $_GET['event']; $name = $_GET['name']; function event_url($e) { - return BASE_URL."?event=$e"; + return "?event=$e"; } function query_db($query, $params=null) { @@ -60,7 +60,7 @@ if (isset($event) && isset($name)) { } $peeps = get_peeps($event); -$shareable_link = event_url($event); +$shareable_link = BASE_URL.event_url($event); ?> @@ -110,7 +110,7 @@ $shareable_link = event_url($event); -

Hello, !

+

Hello, !

Hello!

@@ -127,11 +127,11 @@ $shareable_link = event_url($event); $p[name]\n"; + echo "".htmlspecialchars($p['name'])."\n"; echo "⬇\n"; } $first = reset($peeps); - echo "$first[name]\n"; + echo "".htmlspecialchars($first['name'])."\n"; ?>