From b554ceabc5b778ecfffaf9f7eafe688e5475750b Mon Sep 17 00:00:00 2001
From: Jakub Vrana <vrana@php.net>
Date: Wed, 21 Apr 2010 23:35:56 +0000
Subject: [PATCH] Use htmlspecialchars() in example

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@298287 c90b9560-bf6c-de11-be94-00142212c4b1
---
 features/http-auth.xml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/features/http-auth.xml b/features/http-auth.xml
index 2126b1b5ef..7f10c0d8ec 100644
--- a/features/http-auth.xml
+++ b/features/http-auth.xml
@@ -198,11 +198,11 @@ if (!isset($_SERVER['PHP_AUTH_USER']) ||
     ($_POST['SeenBefore'] == 1 && $_POST['OldAuth'] == $_SERVER['PHP_AUTH_USER'])) {
     authenticate();
 } else {
-    echo "<p>Welcome: {$_SERVER['PHP_AUTH_USER']}<br />";
-    echo "Old: {$_REQUEST['OldAuth']}";
-    echo "<form action='{$_SERVER['PHP_SELF']}' METHOD='post'>\n";
+    echo "<p>Welcome: " . htmlspecialchars($_SERVER['PHP_AUTH_USER']) . "<br />";
+    echo "Old: " . htmlspecialchars($_REQUEST['OldAuth']);
+    echo "<form action='' method='post'>\n";
     echo "<input type='hidden' name='SeenBefore' value='1' />\n";
-    echo "<input type='hidden' name='OldAuth' value='{$_SERVER['PHP_AUTH_USER']}' />\n";
+    echo "<input type='hidden' name='OldAuth' value=\"" . htmlspecialchars($_SERVER['PHP_AUTH_USER']) . "\" />\n";
     echo "<input type='submit' value='Re Authenticate' />\n";
     echo "</form></p>\n";
 }