Conceptually similar to T281043, just in a different extension.
Description
Description
Details
Details
Related Objects
Related Objects
Event Timeline
Comment Actions
Quickie patch which fixes this issue and swaps escaping stuff around and whatnot in order to reduce general reviewer anxiety with this super old codebase.
Quickie patch which fixes this issue and swaps escaping stuff around and whatnot in order to reduce general reviewer anxiety with this super old codebase.
Comment Actions
Same as the other patch, in SportsTeamsManager there's:
<input type="hidden" name="id" value="' . $id . '" />
and I couldn't see where $id was coming from. Otherwise looked fine.