From f249cef05852dc997becfe98992b93b96f5279a9 Mon Sep 17 00:00:00 2001
From: xtnr3v0lt <fahmi.tca@gmail.com>
Date: Tue, 29 Dec 2015 23:42:22 -0500
Subject: [PATCH] file.php

Fixed a Cross site scripting vulnerability discovered by Ben Khlifa Fahmi (https://www.benkhlifa.com/)
---
 template/share/file.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/template/share/file.php b/template/share/file.php
index 17a0dc1..370762d 100755
--- a/template/share/file.php
+++ b/template/share/file.php
@@ -52,12 +52,12 @@
 	</div><!-- / frame-main end-->
 <?php include(TEMPLATE.'common/footer.html');?>
 <script src="<?php echo STATIC_PATH;?>js/lib/seajs/sea.js?ver=<?php echo KOD_VERSION;?>"></script>
-<script src="./index.php?share/common_js&user=<?php echo $_GET['user'];?>&sid=<?php echo $_GET['sid'];?>&#=<?php echo rand_string(8);?>"></script>
+<script src="./index.php?share/common_js&user=<?php echo htmlentities($_GET['user']);?>&sid=<?php echo htmlentities($_GET['sid']);?>&#=<?php echo rand_string(8);?>"></script>
 <script src="<?php echo STATIC_PATH;?>js/lib/ace/src-min-noconflict/ace.js?ver=<?php echo KOD_VERSION;?>"></script>
 <script src="<?php echo STATIC_PATH;?>js/lib/ace/src-min-noconflict/ext-static_highlight.js?ver=<?php echo KOD_VERSION;?>"></script>
 <script type="text/javascript">
 	AUTH  = {'explorer:fileDownload':<?php echo $can_download;?>};
-	G.user = "<?php echo $_GET['user'];?>";
+	G.user = "<?php echo htmlentities($_GET['user']);?>";
 	G.path = "<?php echo (isset($_GET['path'])?urlencode($_GET['path']):'') ;?>";
 	G.sid = "<?php echo $_GET['sid'];?>";
 	G.share_info = <?php echo json_encode($share_info);?>;
@@ -72,4 +72,4 @@
 	seajs.use("app/src/share_index/main");
 </script>
 </body>
-</html>
\ No newline at end of file
+</html>