urlencode() all occurrences of the $login variable when used in url's. Bug noted...

[freeradius.git] / dialup_admin / html / group_toolbar.html.php3

diff --git a/dialup_admin/html/group_toolbar.html.php3 b/dialup_admin/html/group_toolbar.html.php3
index 0763565..c31d599 100644 (file)
--- a/dialup_admin/html/group_toolbar.html.php3
+++ b/dialup_admin/html/group_toolbar.html.php3
@@ -1,12 +1,13 @@
 <?php
+$Login = urlencode($login);
 print <<<EOM
 <tr valign=top>
 <td align=center bgcolor="black" width=100>
-<a href="group_admin.php3?login=$login" title="Administer Group"><font color="white"><b>ADMIN</b></font></a></td>
+<a href="group_admin.php3?login=$Login" title="Administer Group"><font color="white"><b>ADMIN</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_edit.php3?login=$login&user_type=group" title="Edit Group Dialup Settings"><font color="white"><b>EDIT</b></font></a></td>
+<a href="user_edit.php3?login=$Login&user_type=group" title="Edit Group Dialup Settings"><font color="white"><b>EDIT</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_delete.php3?login=$login&user_type=group" title="Delete Group"><font color="white"><b>DELETE</b></font></a></td>
+<a href="user_delete.php3?login=$Login&user_type=group" title="Delete Group"><font color="white"><b>DELETE</b></font></a></td>
 </tr>
 EOM;
 ?>