sanitarise error

This commit is contained in:
lopar 2018-03-04 02:29:14 +02:00
parent 13fcdbfb11
commit a5a25bcc30

View File

@ -51,13 +51,13 @@ class nick
return '<i>невидимка</i>'; return '<i>невидимка</i>';
} else { } else {
if ($this->user_data['align']) { if ($this->user_data['align']) {
$n .= sprintf('<img src="i/align_%s.gif">', htmlspecialchars($this->user_data['align'])); $n .= sprintf('<img src="i/align_%s.gif">', intval($this->user_data['align']));
} }
if ($this->user_data['klan']) { if ($this->user_data['klan']) {
$n .= sprintf('<img src="i/klan/%s.gif">', htmlspecialchars($this->user_data['klan'])); $n .= sprintf('<img src="i/klan/%s.gif">', htmlspecialchars($this->user_data['klan']));
} }
} }
$n .= sprintf('<b>%s</b> [%s] <a href="inf.php?%s" target="_blank"><img src="i/inf.gif" style="width:12px;height:11px"></a>', htmlspecialchars($this->user_data['login']), htmlspecialchars($this->user_data['level']), htmlspecialchars($this->user_data['login'])); $n .= sprintf('<b>%s</b> [%s] <a href="inf.php?%s" target="_blank"><img src="i/inf.gif" style="width:12px;height:11px"></a>', htmlspecialchars($this->user_data['login']), intval($this->user_data['level']), htmlspecialchars($this->user_data['login']));
return $n; return $n;
} }