Changeset 1379

Timestamp:

04/22/2009 10:55:39 AM (17 years ago)

Author:

apeatling

Message:

Adding attribute_escape() to wire_id output.

File:

• trunk/bp-wire/bp-wire-ajax.php (modified) (1 diff)

trunk/bp-wire/bp-wire-ajax.php

@@ -44 +44 @@
     <?php endif; ?>
     
-    <input type="hidden" name="bp_wire_item_id" id="bp_wire_item_id" value="<?php echo $_POST['bp_wire_item_id'] ?>" />
+    <input type="hidden" name="bp_wire_item_id" id="bp_wire_item_id" value="<?php echo attribute_escape( $_POST['bp_wire_item_id'] ) ?>" />
     <?php
 }