summaryrefslogtreecommitdiffstats
path: root/lib/class/song.class.php
diff options
context:
space:
mode:
authorKarl 'vollmerk' Vollmer <vollmer@ampache.org>2007-01-08 18:14:38 +0000
committerKarl 'vollmerk' Vollmer <vollmer@ampache.org>2007-01-08 18:14:38 +0000
commit4818413e5fc72aac3fbc28a9ae6f28732339d54b (patch)
tree389ff2dcd072dd8c2624a6fe85ecddd76a38137b /lib/class/song.class.php
parent9a92a34e2c15942aae49b0928543079b23e9f874 (diff)
downloadampache-4818413e5fc72aac3fbc28a9ae6f28732339d54b.tar.gz
ampache-4818413e5fc72aac3fbc28a9ae6f28732339d54b.tar.bz2
ampache-4818413e5fc72aac3fbc28a9ae6f28732339d54b.zip
fixed unescaped username in urls
Diffstat (limited to 'lib/class/song.class.php')
-rw-r--r--lib/class/song.class.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/class/song.class.php b/lib/class/song.class.php
index 60a9da1f..7378ee29 100644
--- a/lib/class/song.class.php
+++ b/lib/class/song.class.php
@@ -798,7 +798,7 @@ class Song {
function get_url($session_id='',$force_http='') {
/* Define Variables we are going to need */
- $username = $GLOBALS['user']->username;
+ $username = scrub_out($GLOBALS['user']->username);
$song_id = $this->id;
if (conf('require_session')) {
if ($session_id) {