diff options
| author | Ted Trask <ttrask01@yahoo.com> | 2009-01-21 22:04:37 +0000 |
|---|---|---|
| committer | Ted Trask <ttrask01@yahoo.com> | 2009-01-21 22:04:37 +0000 |
| commit | e5cdb84647b17427ed0f8afc77ab83af6f537ac0 (patch) | |
| tree | a08a425cb3704fbc75143d09715c6815ed3ec6f6 /lib/viewfunctions.lua | |
| parent | 1a930fe2020e3d309f4716c4814d1dd8a92ee03c (diff) | |
| download | acf-core-e5cdb84647b17427ed0f8afc77ab83af6f537ac0.tar.bz2 acf-core-e5cdb84647b17427ed0f8afc77ab83af6f537ac0.tar.xz | |
Added escapespecialcharacters to format.lua to escape shell special characters. Reviewed all calls to io.popen and os.execute to escape special characters. Fixed file uploads in openssl and ipsectools with viewfunctions.lua. Tried to fix openssl renew when subject contains special characters, but not done yet.release-0.4.19
git-svn-id: svn://svn.alpinelinux.org/acf/core/trunk@1687 ab2d0c66-481e-0410-8bed-d214d4d58bed
Diffstat (limited to 'lib/viewfunctions.lua')
| -rw-r--r-- | lib/viewfunctions.lua | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/lib/viewfunctions.lua b/lib/viewfunctions.lua index f1c5436..cee6db6 100644 --- a/lib/viewfunctions.lua +++ b/lib/viewfunctions.lua @@ -175,7 +175,11 @@ function displayformstart(myform, page_info) end if myform.descr then io.write('<P CLASS="descr">' .. string.gsub(html.html_escape(myform.descr), "\n", "<BR>") .. "</P>\n") end if myform.errtxt then io.write('<P CLASS="error">' .. string.gsub(html.html_escape(myform.errtxt), "\n", "<BR>") .. "</P>\n") end - io.write('<form action="' .. html.html_escape(myform.action) .. '" method="POST">\n') + io.write('<form action="' .. html.html_escape(myform.action) .. '" ') + if myform.enctype and myform.enctype ~= "" then + io.write('enctype="'..html.html_escape(myform.enctype)..'" ') + end + io.write('method="POST">\n') if myform.value.redir then displayformitem(myform.value.redir, "redir") end |