From 13fcdbfb111a7e9715cf067d8eebd954fb6a3f2f Mon Sep 17 00:00:00 2001
From: lopar <lopar.4ever@gmail.com>
Date: Sun, 4 Mar 2018 02:24:24 +0200
Subject: [PATCH] sanitarise error

---
 classes/nick.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/classes/nick.php b/classes/nick.php
index 7522ca6..36559c0 100644
--- a/classes/nick.php
+++ b/classes/nick.php
@@ -51,15 +51,15 @@ class nick
             return '<i>невидимка</i>';
         } else {
             if ($this->user_data['align']) {
-                $n .= sprintf('<img src="i/align_%s.gif">', $this->user_data['align']);
+                $n .= sprintf('<img src="i/align_%s.gif">', htmlspecialchars($this->user_data['align']));
             }
             if ($this->user_data['klan']) {
-                $n .= sprintf('<img src="i/klan/%s.gif">', $this->user_data['klan']);
+                $n .= sprintf('<img src="i/klan/%s.gif">', htmlspecialchars($this->user_data['klan']));
             }
         }
-        $n .= sprintf('<b>%s</b> [%s] <a href="inf.php?%s" target="_blank"><img src="i/inf.gif" style="width:12px;height:11px"></a>', $this->user_data['login'], $this->user_data['level'], $this->user_data['login']);
+        $n .= sprintf('<b>%s</b> [%s] <a href="inf.php?%s" target="_blank"><img src="i/inf.gif" style="width:12px;height:11px"></a>', htmlspecialchars($this->user_data['login']), htmlspecialchars($this->user_data['level']), htmlspecialchars($this->user_data['login']));
 
-        return htmlspecialchars($n);
+        return $n;
     }
 
     /**