tonyair/silverstripe-userforms
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-userforms.git synced 2024-10-22 15:05:42 +00:00
Code Issues Projects Releases Wiki Activity

MINOR - Added escaping for values passed by url params

Browse Source
This commit is contained in:
marcokernler 2011-12-20 22:17:23 +01:00
parent e24e9b4245
commit ab7e53fb6f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
code/UserDefinedForm.php
View File

@ -407,7 +407,7 @@ class UserDefinedForm_Controller extends Page_Controller {
// set the values passed by the url to the field // set the values passed by the url to the field
$request = $this->getRequest(); $request = $this->getRequest();
$value = $request->getVar($field->name); $value = Convert::raw2att($request->getVar($field->name));
if(isset($value)) $field->value = $value; if(isset($value)) $field->value = $value;
$fields->push($field); $fields->push($field);