From 3ca9efd71cfe5e63f4d8494bc61d63fefeaa7659 Mon Sep 17 00:00:00 2001
From: pikami <pjuklas@mail.com>
Date: Mon, 13 Jun 2016 12:49:13 +0000
Subject: [PATCH] Pached XSS

---
 MyPastes.php     | 4 ++--
 NewestPastes.php | 4 ++--
 ViewPaste.php    | 4 ++--
 index.php        | 2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/MyPastes.php b/MyPastes.php
index 7fe7d6e..8f5c92c 100644
--- a/MyPastes.php
+++ b/MyPastes.php
@@ -21,9 +21,9 @@ if($stmt->rowCount()>0){
 	printf('<tbody>');
 	while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
 		$title = $row['title'];
-		printf('<tr><td style="text-align: left;">'.$row["title"].'</td>');
+		printf('<tr><td style="text-align: left;">'.htmlspecialchars($row["title"], ENT_QUOTES, 'UTF-8').'</td>');
 		printf('<td style="text-align: left;">'.date('Y-m-d',$row["created"]).'</td>');
-		printf('<td style="text-align: right;"><a href="'.$row["uid"].'">'.$row["uid"].'</a></td></tr>');
+		printf('<td style="text-align: right;"><a href="'.htmlspecialchars($row["uid"], ENT_QUOTES, 'UTF-8').'">'.htmlspecialchars($row["uid"], ENT_QUOTES, 'UTF-8').'</a></td></tr>');
 	}
 	printf('</tbody></talbe>');
 } else {
diff --git a/NewestPastes.php b/NewestPastes.php
index 8cfa522..a60f4b3 100644
--- a/NewestPastes.php
+++ b/NewestPastes.php
@@ -6,9 +6,9 @@
 		  include "config/config.php";
 		  $stmt = $conn->query('SELECT * FROM pastes WHERE exposure=0 ORDER BY id DESC LIMIT 5');
           while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
-			$title = $row['title'];
+			$title = htmlspecialchars($row['title'], ENT_QUOTES, 'UTF-8');
 			if(strlen($title)>25)$title = substr($title,0,25)."...";
-			echo "<a href=\"".$row['uid']."\" class=\"list-group-item\">".$title."</a>";
+			echo "<a href=\"".htmlspecialchars($row['uid'], ENT_QUOTES, 'UTF-8')."\" class=\"list-group-item\">".$title."</a>";
           }
 		?>
 	  </div>
diff --git a/ViewPaste.php b/ViewPaste.php
index e16a739..d4556de 100644
--- a/ViewPaste.php
+++ b/ViewPaste.php
@@ -12,8 +12,8 @@ if(isset($uid)){
 			echo "<h1>This paste is private</h1>";
 			die();
 		}
-		echo "<h1>".$result["title"]."</h1>";
-		echo "<textarea class=\"form-control\" rows=\"5\" disabled=\"true\">".$result["text"]."</textarea>";
+		echo "<h1>".htmlspecialchars($result["title"], ENT_QUOTES, 'UTF-8')."</h1>";
+		echo "<textarea class=\"form-control\" rows=\"5\" disabled=\"true\">".htmlspecialchars($result["text"], ENT_QUOTES, 'UTF-8')."</textarea>";
 	}
 	else echo "Paste does not exist";
 	$conn = null;
diff --git a/index.php b/index.php
index 15cccf0..5023506 100644
--- a/index.php
+++ b/index.php
@@ -37,7 +37,7 @@
 			$user = GetUserByID($userID);
 			echo '
 			<li class="dropdown">
-				<a class="dropdown-toggle glyphicon glyphicon-user" data-toggle="dropdown" href="#"> '.$user[1].'<span class="caret"></span></a>
+				<a class="dropdown-toggle glyphicon glyphicon-user" data-toggle="dropdown" href="#"> '.htmlspecialchars($user[1], ENT_QUOTES, 'UTF-8').'<span class="caret"></span></a>
 				<ul class="dropdown-menu">
 					<li><a href="mypastes">My pastes</a></li>
 					<li><a href="logout">Logout</a></li>