From a5722014c0319689a76969dcbaea7374a606998e Mon Sep 17 00:00:00 2001 From: Chris Fulljames Date: Sun, 10 May 2026 17:48:29 -0400 Subject: [PATCH] Fix escaping and URL prefix --- index.php | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/index.php b/index.php index f99c444..9961194 100755 --- a/index.php +++ b/index.php @@ -5,7 +5,7 @@ $event = $_GET['event']; $name = $_GET['name']; function event_url($e) { - return BASE_URL."?event=$e"; + return "?event=$e"; } function query_db($query, $params=null) { @@ -60,7 +60,7 @@ if (isset($event) && isset($name)) { } $peeps = get_peeps($event); -$shareable_link = event_url($event); +$shareable_link = BASE_URL.event_url($event); ?> @@ -110,7 +110,7 @@ $shareable_link = event_url($event); -

Hello, !

+

Hello, !

Hello!

@@ -127,11 +127,11 @@ $shareable_link = event_url($event); $p[name]\n"; + echo "".htmlspecialchars($p['name'])."\n"; echo "⬇\n"; } $first = reset($peeps); - echo "$first[name]\n"; + echo "".htmlspecialchars($first['name'])."\n"; ?> -- 2.39.5