From a6d5044342e7a0caf19434314927be81de1276d0 Mon Sep 17 00:00:00 2001
From: Dhaval Prajapati <42002820+dhavz@users.noreply.github.com>
Date: Fri, 2 Oct 2020 15:28:05 +0530
Subject: [PATCH] Adding Cross site scrpting Protection

---
 edit.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/edit.php b/edit.php
index 03f119c..ec35f8d 100644
--- a/edit.php
+++ b/edit.php
@@ -61,18 +61,18 @@
 		<table border="0">
 			<tr> 
 				<td>Name</td>
-				<td><input type="text" name="name" value="<?php echo $name;?>"></td>
+				<td><input type="text" name="name" value="<?php echo htmlspecialchars($name, ENT_QUOTES);?>"></td>
 			</tr>
 			<tr> 
 				<td>Age</td>
-				<td><input type="text" name="age" value="<?php echo $age;?>"></td>
+				<td><input type="text" name="age" value="<?php echo htmlspecialchars($age, ENT_QUOTES);?>"></td>
 			</tr>
 			<tr> 
 				<td>Email</td>
-				<td><input type="text" name="email" value="<?php echo $email;?>"></td>
+				<td><input type="text" name="email" value="<?php echo htmlspecialchars($email, ENT_QUOTES);?>"></td>
 			</tr>
 			<tr>
-				<td><input type="hidden" name="id" value=<?php echo $_GET['id'];?>></td>
+				<td><input type="hidden" name="id" value=<?php echo htmlspecialchars($_GET['id'], ENT_QUOTES);?>></td>
 				<td><input type="submit" name="update" value="Update"></td>
 			</tr>
 		</table>