From dea9e7ffa1bf5db99524ae98786f956e43ec84ac Mon Sep 17 00:00:00 2001
From: Karl Vollmer <vollmer@ampache.org>
Date: Wed, 11 May 2011 16:08:17 -0300
Subject: Resolves
 http://securityhome.eu/os/symbian/exploit.php?eid=13841837434dc7c979ead967.10205987

---
 templates/show_login_form.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates')

diff --git a/templates/show_login_form.inc.php b/templates/show_login_form.inc.php
index 800d0894..d4d65b2d 100644
--- a/templates/show_login_form.inc.php
+++ b/templates/show_login_form.inc.php
@@ -64,7 +64,7 @@ function focus(){ document.login.username.focus(); }
 
 			<div class="loginfield" id="usernamefield">
         <label for="username"><?php echo  _('Username'); ?>:</label>
-			  <input class="text_input" type="text" id="username" name="username" value="<?php echo  $_REQUEST['username']; ; ?>" />
+			  <input class="text_input" type="text" id="username" name="username" value="<?php echo scrub_out($_REQUEST['username']); ?>" />
       </div>
 			<div class="loginfield" id="passwordfield">
         <label for="password"><?php echo  _('Password'); ?>:</label>
-- 
cgit