Update profile_list.php (#113)

xmpp/profile_list.php

@@ -27,30 +27,30 @@ $row_style["0"] = "row_style0";
 $row_style["1"] = "row_style1";
 
 foreach($profiles_array as $profile){
-	$tr_link = (permission_exists('xmpp_edit')) ? "href='xmpp_profile_edit.php?id=".$profile['xmpp_profile_uuid']."'" : null;
+	$tr_link = (permission_exists('xmpp_edit')) ? "href='xmpp_profile_edit.php?id=".escape($profile['xmpp_profile_uuid'])."'" : null;
 	?>
 	<tr <?php echo $tr_link; ?>>
 	<td class='<?php echo $row_style[$c]; ?>'>
 		<?php
 		if (permission_exists('xmpp_edit')) {
-			?><a href='xmpp_profile_edit.php?id=<?php echo $profile['xmpp_profile_uuid']; ?>'><?php echo $profile['profile_name']; ?></a><?php
+			?><a href='xmpp_profile_edit.php?id=<?php echo escape($profile['xmpp_profile_uuid']); ?>'><?php echo $profile['profile_name']; ?></a><?php
 		}
 		else {
-			echo $profile['profile_name'];
+			echo escape($profile['profile_name']);
 		}
 		?>
 	</td>
-	<td class='<?php echo $row_style[$c]; ?>'><?php echo $profile['context']; ?>&nbsp;</td>
-	<td class='<?php echo $row_style[$c]; ?>'><?php echo $profile['status']; ?>&nbsp;</td>
-	<td class='<?php echo $row_style[$c]; ?>'><?php echo ucwords($profile['enabled']); ?>&nbsp;</td>
-	<td class='row_stylebg'><?php echo $profile['description']; ?>&nbsp;</td>
+	<td class='<?php echo $row_style[$c]; ?>'><?php echo escape($profile['context']); ?>&nbsp;</td>
+	<td class='<?php echo $row_style[$c]; ?>'><?php echo escape($profile['status']); ?>&nbsp;</td>
+	<td class='<?php echo $row_style[$c]; ?>'><?php echo escape(ucwords($profile['enabled'])); ?>&nbsp;</td>
+	<td class='row_stylebg'><?php echo escape($profile['description']); ?>&nbsp;</td>
 	<td class='list_control_icons'>
 		<?php
 		if (permission_exists('xmpp_edit')) {
-			?><a href='xmpp_profile_edit.php?id=<?php echo $profile['xmpp_profile_uuid']; ?>' alt='<?php echo $text['button-edit']?>'><?php echo $v_link_label_edit; ?></a><?php
+			?><a href='xmpp_profile_edit.php?id=<?php echo escape($profile['xmpp_profile_uuid']); ?>' alt='<?php echo $text['button-edit']?>'><?php echo $v_link_label_edit; ?></a><?php
 		}
 		if (permission_exists('xmpp_delete')) {
-			?><a href='profile_delete.php?id=<?php echo $profile['xmpp_profile_uuid']; ?>' onclick="return confirm('<?php echo $text['confirm-delete']?>')" alt='<?php echo $text['button-delete']?>'><?php echo $v_link_label_delete; ?></a><?php
+			?><a href='profile_delete.php?id=<?php echo escape($profile['xmpp_profile_uuid']); ?>' onclick="return confirm('<?php echo $text['confirm-delete']?>')" alt='<?php echo $text['button-delete']?>'><?php echo $v_link_label_delete; ?></a><?php
 		}
 		?>
 	</td>
@@ -67,4 +67,4 @@ if ($c==0) { $c=1; } else { $c=0; }
 </td>
 </tr>
 </table>
-<br><br>
+<br><br>