cvs: pearweb / package.php package.xml /public_html account-edit.php

cellog          Tue Oct 31 03:37:27 2006 UTC

  Modified files:              
    /pearweb    package.php package.xml 
    /pearweb/public_html        account-edit.php 
  Log:
  fix Bug #5340         User details are overescaped
  
http://cvs.php.net/viewvc.cgi/pearweb/package.php?r1=1.16&r2=1.17&diff_format=u
Index: pearweb/package.php
diff -u pearweb/package.php:1.16 pearweb/package.php:1.17
--- pearweb/package.php:1.16    Mon Oct 30 04:43:22 2006
+++ pearweb/package.php Tue Oct 31 03:37:27 2006
@@ -20,6 +20,7 @@
 $a->setNotes('
  * fix REST generation for deprecated packages/channels
  * fix REST generation of packagesinfo.xml for categories
+ * fix Bug #5340: User details are overescaped
 ');
 $a->resetUsesrole();
 $a->addUsesRole('web', 'Role_Web', 'pearified.com');
http://cvs.php.net/viewvc.cgi/pearweb/package.xml?r1=1.43&r2=1.44&diff_format=u
Index: pearweb/package.xml
diff -u pearweb/package.xml:1.43 pearweb/package.xml:1.44
--- pearweb/package.xml:1.43    Mon Oct 30 04:43:22 2006
+++ pearweb/package.xml Tue Oct 31 03:37:27 2006
@@ -52,8 +52,8 @@
   <email>dufuz@xxxxxxx</email>
   <active>no</active>
  </developer>
- <date>2006-10-29</date>
- <time>23:43:01</time>
+ <date>2006-10-30</date>
+ <time>22:37:07</time>
  <version>
   <release>1.0.0RC2</release>
   <api>0.1.1</api>
@@ -66,6 +66,7 @@
  <notes>
  * fix REST generation for deprecated packages/channels
  * fix REST generation of packagesinfo.xml for categories
+ * fix Bug #5340: User details are overescaped
  </notes>
  <contents>
   <dir baseinstalldir="/" name="/">
@@ -864,11 +865,12 @@
     <release>beta</release>
     <api>stable</api>
    </stability>
-   <date>2006-10-29</date>
+   <date>2006-10-30</date>
    <license uri="http://www.php.net/license";>PHP License</license>
    <notes>
  * fix REST generation for deprecated packages/channels
  * fix REST generation of packagesinfo.xml for categories
+ * fix Bug #5340: User details are overescaped
    </notes>
   </release>
  </changelog>
http://cvs.php.net/viewvc.cgi/pearweb/public_html/account-edit.php?r1=1.52&r2=1.53&diff_format=u
Index: pearweb/public_html/account-edit.php
diff -u pearweb/public_html/account-edit.php:1.52 
pearweb/public_html/account-edit.php:1.53
--- pearweb/public_html/account-edit.php:1.52   Sat Feb 18 14:41:49 2006
+++ pearweb/public_html/account-edit.php        Tue Oct 31 03:37:27 2006
@@ -15,7 +15,7 @@
    +----------------------------------------------------------------------+
    | Authors:                                                             |
    +----------------------------------------------------------------------+
-   $Id: account-edit.php,v 1.52 2006/02/18 14:41:49 pajoye Exp $
+   $Id: account-edit.php,v 1.53 2006/10/31 03:37:27 cellog Exp $
 */
 
 auth_require();
@@ -86,11 +86,15 @@
                 exit();
             }
 
-            $user_data_post[$k] = htmlspecialchars($_POST[$k]);
-            if ($k == 'userinfo' && strlen($user_data_post[$k]) > 500) {
-                report_error('User information exceeds the allowed length of 
500 characters.');
-                response_footer();
-                exit();
+            if ($k != 'userinfo') {
+                $user_data_post[$k] = htmlspecialchars($_POST[$k]);
+            } else {
+                $user_data_post[$k] = $_POST[$k];
+                if (strlen($user_data_post[$k]) > 500) {
+                    report_error('User information exceeds the allowed length 
of 500 characters.');
+                    response_footer();
+                    exit();
+                }
             }
         }
 

-- 
PEAR CVS Mailing List (http://pear.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php