fix taint

funktechno · Oct 11, 2021 · 96176a4 · 96176a4
1 parent f9d81d1
commit 96176a4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/view/login.php b/view/login.php
@@ -33,7 +33,7 @@
         <em>Passwords must be at least 8 characters and contain at least 1 number, 1 capital letter, and 1 special character</em>
         <br>
 
-        <input type="password" name="clientPassword" id="clientPassword" pattern="(?=^.{8,}$)(?=.*\d)(?=.*\W+)(?![.\n])(?=.*[A-Z])(?=.*[a-z]).*$" <?php echo (isset($clientPassword)) ? "value='$clientPassword'" : "" ?> required>
+        <input type="password" name="clientPassword" id="clientPassword" pattern="(?=^.{8,}$)(?=.*\d)(?=.*\W+)(?![.\n])(?=.*[A-Z])(?=.*[a-z]).*$" <?php echo htmlentities(isset($clientPassword) ? "value='$clientPassword'" : "") ?> required>
         <br>
 
         <!-- <button class="btn red" type="submit">Login</button> -->

diff --git a/view/registration.php b/view/registration.php
@@ -34,7 +34,7 @@
         <em>Passwords must be at least 8 characters and contain at least 1 number, 1 capital letter, and 1 special character</em>
         <br>
 
-        <input type="password" name="clientPassword" id="clientPassword" <?php echo (isset($clientPassword)) ? "value='$clientPassword'" : "" ?>  pattern="(?=^.{8,}$)(?=.*\d)(?=.*\W+)(?![.\n])(?=.*[A-Z])(?=.*[a-z]).*$" required>
+        <input type="password" name="clientPassword" id="clientPassword" <?php echo htmlentities(isset($clientPassword) ? "value='$clientPassword'" : "") ?>  pattern="(?=^.{8,}$)(?=.*\d)(?=.*\W+)(?![.\n])(?=.*[A-Z])(?=.*[a-z]).*$" required>
         <br>
         <!-- <button class=" btn red" type="submit">Register</button> -->
         <input type="submit" class="btn red" name="submit" id="regbtn" value="Register">