#! /bin/sh /usr/share/dpatch/dpatch-run
## 13_possible_xss_vulnerability.dpatch by  <camrdale@gmail.com>
##
## All lines beginning with `## DP:' are a description of the patch.
## DP: Fix a possible XSS vulnerability due to urldecoding after htmlentities.

@DPATCH@
diff -urNad torrentflux~/html/dir.php torrentflux/html/dir.php
--- torrentflux~/html/dir.php	2006-12-09 15:19:23.000000000 -0800
+++ torrentflux/html/dir.php	2006-12-09 15:20:30.000000000 -0800
@@ -258,7 +258,7 @@
 
 if (!file_exists($cfg["path"].$dir))
 {
-    echo "<strong>".$dir."</strong> could not be found or is not valid.";
+    echo "<strong>".htmlentities($dir)."</strong> could not be found or is not valid.";
 }
 else
 {
diff -urNad torrentflux~/html/index.php torrentflux/html/index.php
--- torrentflux~/html/index.php	2006-12-09 15:19:23.000000000 -0800
+++ torrentflux/html/index.php	2006-12-09 15:29:13.000000000 -0800
@@ -394,7 +394,7 @@
         if (is_file($cfg["torrent_file_path"].$file_name))
         {
             // Error
-            $messages .= "<b>Error</b> with (<b>".$file_name."</b>), the file already exists on the server.<br><center><a href=\"".$_SERVER['PHP_SELF']."\">[Refresh]</a></center>";
+            $messages .= "<b>Error</b> with (<b>".htmlentities($file_name)."</b>), the file already exists on the server.<br><center><a href=\"".$_SERVER['PHP_SELF']."\">[Refresh]</a></center>";
             $ext_msg = "DUPLICATE :: ";
         }
         else
@@ -407,7 +407,7 @@
     }
     else
     {
-        $messages .= "<b>Error</b> Getting the File (<b>".$file_name."</b>), Could be a Dead URL.<br><center><a href=\"".$_SERVER['PHP_SELF']."\">[Refresh]</a></center>";
+        $messages .= "<b>Error</b> Getting the File (<b>".htmlentities($file_name)."</b>), Could be a Dead URL.<br><center><a href=\"".$_SERVER['PHP_SELF']."\">[Refresh]</a></center>";
     }
 
     if ($messages == "")
@@ -440,7 +440,7 @@
             if (is_file($cfg["torrent_file_path"].$file_name))
             {
                 // Error
-                $messages .= "<b>Error</b> with (<b>".$file_name."</b>), the file already exists on the server.<br><center><a href=\"".$_SERVER['PHP_SELF']."\">[Refresh]</a></center>";
+                $messages .= "<b>Error</b> with (<b>".htmlentities($file_name)."</b>), the file already exists on the server.<br><center><a href=\"".$_SERVER['PHP_SELF']."\">[Refresh]</a></center>";
                 $ext_msg = "DUPLICATE :: ";
             }
             else
@@ -455,7 +455,7 @@
                 }
                 else
                 {
-                    $messages .= "<font color=\"#ff0000\" size=3>ERROR: File not uploaded, file could not be found or could not be moved:<br>".$cfg["torrent_file_path"] . $file_name."</font><br>";
+                    $messages .= "<font color=\"#ff0000\" size=3>ERROR: File not uploaded, file could not be found or could not be moved:<br>".$cfg["torrent_file_path"] . htmlentities($file_name)."</font><br>";
                 }
             }
         }