[Bug 43] New: packages_xml_out doesn't escape characters in the checks section.

[bugzilla-daemon at wpkg.org]

Please reply using this URL only: http://bugs.wpkg.org/show_bug.cgi?id=43

           Summary: packages_xml_out doesn't escape characters in the checks
                    section.
           Product: WPKG-http
           Version: unspecified
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: WPKG-http
        AssignedTo: mangoo at mch.one.pl
        ReportedBy: greg at mtechsolutions.ca
         QAContact: wpkg-users at lists.wpkg.org


Using an uninstall condition that has "&" in the text causes XML validation error.


Patch follows.

--- packages_xml_out.php.orig   2006-12-19 14:05:25.831684250 -0500
+++ packages_xml_out.php        2006-12-19 14:04:51.412540589 -0500
@@ -140,6 +140,7 @@
   $chk_h=mysql_query(sprintf($chk_sql,quote_smart($pack_id))) or
die(sprintf($chk_sql,quote_smart($pack_id)) . " --- " . mysql_error());
   $count=0;
   while($chk_data=mysql_fetch_array($chk_h)) {
+    escape_str($chk_data);
     $count++;
     if($chk_data[1]!='') {
       if ( $chk_count>2 )

-- 
Configure bugmail: http://bugs.wpkg.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.