Commit ded8be12 authored by Carsten  Rose's avatar Carsten Rose
Browse files

Ldap.php: All values from LDAP will be HTML entity encoded.

parent c8768f97
......@@ -135,7 +135,7 @@ class Ldap {
// Collect all attributes
foreach ($attr as $key) {
$value = isset($info[0][$key][0]) ? $info[0][$key][0] : '';
$arr[$key] = $value;
$arr[$key] = htmlentities($value);
}
}
ldap_close($ds);
......@@ -193,7 +193,7 @@ class Ldap {
$args = array($format);
foreach ($keyArr as $key) {
$args[] = (isset($infoElement[$key][0])) ? $infoElement[$key][0] : '';
$args[] = (isset($infoElement[$key][0])) ? htmlentities($infoElement[$key][0]) : '';
}
return call_user_func_array('sprintf', $args);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment