113 ochrana proti vložení skriptu, přesměrování

2024-10-01 17:57:35 +02:00
parent 06061f84dc
commit 9e16b335c9
3 changed files with 52 additions and 13 deletions
--- a/www2databaze/zaci.php
+++ b/www2databaze/zaci.php
@ -41,7 +41,7 @@ if ($result === false) {
        <?php else: ?>
            <ul>
                <?php foreach ($students as $one_student): ?>
-                    <li><?php echo $one_student["first_name"]. " " .$one_student["second_name"] ?></li>
+                    <li><?= htmlspecialchars($one_student["first_name"]). " " .htmlspecialchars($one_student["second_name"]) ?></li>
                    <a href="jeden-zak.php?id=<?= $one_student['id'] ?>">Více informací</a>
                <?php endforeach; ?>