diff options
Diffstat (limited to 'login.php')
| -rw-r--r-- | login.php | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -20,10 +20,10 @@ <form method="POST" onSubmit="document.getElementById('loginbutton').disabled = true;"> <?php if($databaseLogin) { ?> <p style="color: orange; font-size: 8pt; font-weight: bold; ">Please enter the database password. This is a different password from the user password.<br><i>Note: if this is your first time scanning the music directory, the page may take a while to load.</i></p> -<label>Database Password: <input type="password" name="dbpassword"<?php if($dbpassword != "") echo ' value="'.$dbpassword.'"'; ?>></label><br> +<label>Database Password: <input type="password" name="dbpassword"<?php if($dbpassword != "") echo ' value="'.htmlentities($dbpassword).'"'; ?>></label><br> <?php } else { ?> -<label>Username: <input type="text" name="username"<?php if($username != "") echo ' value="'.$username.'"'; ?>></label><br> -<label>Password: <input type="password" name="password"<?php if($password != "") echo ' value="'.$password.'"'; ?>></label><br> +<label>Username: <input type="text" name="username"<?php if($username != "") echo ' value="'.htmlentities($username).'"'; ?>></label><br> +<label>Password: <input type="password" name="password"<?php if($password != "") echo ' value="'.htmlentities($password).'"'; ?>></label><br> <?php } ?> <input type="submit" value="Login" id="loginbutton"> </form> |