← Back to branch summary

~ubuntu-branches/ubuntu/precise/boinc/precise

« back to all changes in this revision

Viewing changes to html/user/bolt_sched.php

Tags: 6.12.8+dfsg-1
* New upstream release.
* Simplified debian/rules

Show diffs side-by-side

added added

removed removed

Lines of Context:
html/user/bolt_sched.php
365
365
    error_page("no such course");
366
366
}
367
367
$view_id = get_int('view_id', true);
368
 
$action = get_str('action', true);
 
368
$action = sanitize_tags(get_str('action', true));
369
369
$course_doc = require_once($course->doc_file());
370
370
 
371
371
switch ($action) {
563
563
        echo "NO XSET"; exit;
564
564
    }
565
565
    $xset = $iter->xset;
566
 
    $unit_name = get_str('unit_name');
 
566
    $unit_name = sanitize_tags(get_str('unit_name'));
567
567
    $found = $xset->start_review($iter, $unit_name);
568
568
    if (!$found) {
569
569
        echo "REVIEW UNIT MISSING"; exit;