From e5cdb84647b17427ed0f8afc77ab83af6f537ac0 Mon Sep 17 00:00:00 2001
From: Ted Trask <ttrask01@yahoo.com>
Date: Wed, 21 Jan 2009 22:04:37 +0000
Subject: Added escapespecialcharacters to format.lua to escape shell special
 characters.  Reviewed all calls to io.popen and os.execute to escape special
 characters.  Fixed file uploads in openssl and ipsectools with
 viewfunctions.lua.  Tried to fix openssl renew when subject contains special
 characters, but not done yet.

git-svn-id: svn://svn.alpinelinux.org/acf/core/trunk@1687 ab2d0c66-481e-0410-8bed-d214d4d58bed
---
 lib/viewfunctions.lua | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'lib/viewfunctions.lua')

diff --git a/lib/viewfunctions.lua b/lib/viewfunctions.lua
index f1c5436..cee6db6 100644
--- a/lib/viewfunctions.lua
+++ b/lib/viewfunctions.lua
@@ -175,7 +175,11 @@ function displayformstart(myform, page_info)
 	end
 	if myform.descr then io.write('<P CLASS="descr">' .. string.gsub(html.html_escape(myform.descr), "\n", "<BR>") .. "</P>\n") end
 	if myform.errtxt then io.write('<P CLASS="error">' .. string.gsub(html.html_escape(myform.errtxt), "\n", "<BR>") .. "</P>\n") end
-	io.write('<form action="' .. html.html_escape(myform.action) .. '" method="POST">\n')
+	io.write('<form action="' .. html.html_escape(myform.action) .. '" ')
+	if myform.enctype and myform.enctype ~= "" then
+		io.write('enctype="'..html.html_escape(myform.enctype)..'" ')
+	end
+	io.write('method="POST">\n')
 	if myform.value.redir then
 		displayformitem(myform.value.redir, "redir")
 	end
-- 
cgit v1.2.3