X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/mfinanz.git/blobdiff_plain/ee3ab257a5a8f5d4d20ffcf5f3b8259b822037f2..5cf977e52788c523150fa19225b90914e6ddc909:/bin/mozilla/common.pl diff --git a/bin/mozilla/common.pl b/bin/mozilla/common.pl index d006c5436..473acfffc 100644 --- a/bin/mozilla/common.pl +++ b/bin/mozilla/common.pl @@ -578,8 +578,11 @@ sub mark_as_paid_common { $form->redirect($locale->text("Marked as paid")); } else { - my $referer = $ENV{HTTP_REFERER}; - $referer =~ s/^(.*)action\=.*\&(.*)$/$1action\=mark_as_paid\&mark_as_paid\=1\&login\=$form->{login}\&password\=$form->{password}\&id\=$form->{id}\&$2/; + my $referer = $ENV{HTTP_REFERER}; + my $login = $form->escape($form->{login}); + my $password = $form->escape($form->{password}); + my $id = $form->escape($form->{id}); + $referer =~ s/^(.*)action\=.*\&(.*)$/$1action\=mark_as_paid\&mark_as_paid\=1\&login\=$login\&password\=$password\&id\=$id\&$2/; $form->header(); print qq||; print qq|

|.$locale->text('Mark as paid?').qq|