<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE extension SYSTEM "ext-1.0.dtd">

<extension engine="1.0">
	<id>hotfix_133_xss_attack_in_profile</id>
	<title>PunBB 1.3-1.3.3 hotfix for a potential XSS attack on password change.</title>
	<version>1.0</version>
	<description>XSS vulnerability on password change in profile.php is fixed. Reported by Richard Sammet.</description>
	<author>PunBB Development Team</author>
	<minversion>1.3</minversion>
	<maxtestedon>1.3.3</maxtestedon>

	<hooks>
		<hook id="pf_change_pass_key_pre_fieldset,pf_change_pass_normal_pre_fieldset"><![CDATA[
$_POST['req_old_password'] = isset($_POST['req_old_password']) ? forum_htmlencode($_POST['req_old_password']) : '';
$_POST['req_new_password1'] = isset($_POST['req_new_password1']) ? forum_htmlencode($_POST['req_new_password1']) : '';
$_POST['req_new_password2'] = isset($_POST['req_new_password2']) ? forum_htmlencode($_POST['req_new_password2']) : '';
		]]></hook>
		<hook id="pf_change_email_normal_pre_fieldset"><![CDATA[
$_POST['req_password'] = isset($_POST['req_password']) ? forum_htmlencode($_POST['req_password']) : '';
		]]></hook>
	</hooks>
</extension>
