removed XSS hole caused by "urldecode"

This commit is contained in:
gbateson
2005-09-20 11:57:53 +00:00
parent d27162c0cd
commit 7fc7e9645f
-3
View File
@@ -18,9 +18,6 @@
error("You are not allowed to view this page!");
}
// decode the reference (not usually necessary)
$params->reference = urldecode($params->reference);
if (isadmin()) {
$params->location = optional_param('location', HOTPOT_LOCATION_COURSEFILES);
} else {