Security issue: Adding Security::remove_XSS function

15 years ago · b4532555c8
parent 267dc40f2a
commit b4532555c8
1 changed files with 1 additions and 1 deletions
--- a/main/inc/lib/tracking.lib.php
+++ b/main/inc/lib/tracking.lib.php
@ -1443,7 +1443,7 @@ class TrackingCourseLog {
 		// the form elements for the $_GET parameters (because the form is passed through GET
 		foreach ($_GET as $key=>$value){
 			if ($key <> 'additional_profile_field')	{
-				$return .= '<input type="hidden" name="'.$key.'" value="'.Security::remove_XSS($value).'" />';
+				$return .= '<input type="hidden" name="'.Security::remove_XSS($key).'" value="'.Security::remove_XSS($value).'" />';
 			}
 		}
 		// the submit button