X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=plugins%2Fadmin%2Ffai%2Fclass_faiVariableEntry.inc;h=44780047c8add96fad704f6aa30a5d4d81600586;hb=e51bd609d694c4708925f3ae3ca8556caabe7720;hp=e972c420d8b2f405aebf6e7e5388e0a932866c2e;hpb=4f5f36b10fa8974ae4bc72f20c1657fd828e7d4e;p=gosa.git diff --git a/plugins/admin/fai/class_faiVariableEntry.inc b/plugins/admin/fai/class_faiVariableEntry.inc index e972c420d..44780047c 100644 --- a/plugins/admin/fai/class_faiVariableEntry.inc +++ b/plugins/admin/fai/class_faiVariableEntry.inc @@ -41,8 +41,15 @@ class faiVariableEntry extends plugin $smarty = get_smarty(); $display = ""; + /* Magic quotes GPC, escapes every ' " \, to solve some security risks + * If we post the escaped strings they will be escaped again + */ foreach($this->attributes as $attrs){ - $smarty->assign($attrs,stripslashes($this->$attrs)); + if(get_magic_quotes_gpc()){ + $smarty->assign($attrs,stripslashes($this->$attrs)); + }else{ + $smarty->assign($attrs,($this->$attrs)); + } } for($i =1 ; $i <= 100 ; $i++){