diff --git a/module/company/model.php b/module/company/model.php index e189200163..be7f081894 100644 --- a/module/company/model.php +++ b/module/company/model.php @@ -137,7 +137,9 @@ class companyModel extends model */ public function update() { - $company = fixer::input('post')->get(); + $company = fixer::input('post') + ->stripTags('name') + ->get(); if($company->website == 'http://') $company->website = ''; if($company->backyard == 'http://') $company->backyard = ''; $companyID = $this->app->company->id; diff --git a/module/repo/control.php b/module/repo/control.php index d60569ed4f..b3df7d5b68 100644 --- a/module/repo/control.php +++ b/module/repo/control.php @@ -360,7 +360,7 @@ class repo extends control public function browse($repoID = 0, $branchID = '', $objectID = 0, $path = '', $revision = 'HEAD', $refresh = 0) { $repoID = $this->repo->saveState($repoID, $objectID); - if($branchID) $branchID = base64_decode($branchID); + if($branchID) $branchID = base64_decode(urldecode($branchID)); /* Get path and refresh. */ if($this->get->repoPath) $path = $this->get->repoPath; diff --git a/module/repo/view/browse.html.php b/module/repo/view/browse.html.php index 3f6fdedf9c..2fa67be799 100644 --- a/module/repo/view/browse.html.php +++ b/module/repo/view/browse.html.php @@ -31,7 +31,7 @@ foreach($branches as $id => $branchName) { $isSelected = $id == $branchID ? 'class="selected"' : ''; - $base64BranchID = base64_encode($id); + $base64BranchID = urlencode(base64_encode($id)); echo "