Quick fixable issue with uniadmin in the GETADDONLIST operations.
Some sites have a home page with an ampersand in the title. This causes Uniuploader to crash. The bug has already been reported here, but here's the workaround.
Sample file:
FuBar-DPS: http://files.wowace.com/FuBar_DPS/FuBar_DPS.zip
TOC Shows:
- Code: Select all
## X-Website: http://www.wowinterface.com/downloads/fileinfo.php?s=&id=5013
The URL passes the '&' direct into the XML, breaking it and causing the following error:
- Code: Select all
UpdateAddons: This is an unexpected token. The expected token is 'SEMICOLON'. Line 1246, position 136.
The '&' should be escaped.
Fix:
File: modules/interface.php, line 279:
- Code: Select all
$addonElement->attribute('homepage', $row['homepage']);
change to:
- Code: Select all
$addonElement->attribute('homepage', htmlspecialchars($row['homepage']));
edit: added the url for the existing bug report.
