diff options
author | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2007-01-08 18:14:38 +0000 |
---|---|---|
committer | Karl 'vollmerk' Vollmer <vollmer@ampache.org> | 2007-01-08 18:14:38 +0000 |
commit | 4818413e5fc72aac3fbc28a9ae6f28732339d54b (patch) | |
tree | 389ff2dcd072dd8c2624a6fe85ecddd76a38137b /lib/class/song.class.php | |
parent | 9a92a34e2c15942aae49b0928543079b23e9f874 (diff) | |
download | ampache-4818413e5fc72aac3fbc28a9ae6f28732339d54b.tar.gz ampache-4818413e5fc72aac3fbc28a9ae6f28732339d54b.tar.bz2 ampache-4818413e5fc72aac3fbc28a9ae6f28732339d54b.zip |
fixed unescaped username in urls
Diffstat (limited to 'lib/class/song.class.php')
-rw-r--r-- | lib/class/song.class.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/class/song.class.php b/lib/class/song.class.php index 60a9da1f..7378ee29 100644 --- a/lib/class/song.class.php +++ b/lib/class/song.class.php @@ -798,7 +798,7 @@ class Song { function get_url($session_id='',$force_http='') { /* Define Variables we are going to need */ - $username = $GLOBALS['user']->username; + $username = scrub_out($GLOBALS['user']->username); $song_id = $this->id; if (conf('require_session')) { if ($session_id) { |