From 05e12dde699c738e91ee3b42be0de6f482db8223 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Fri, 21 Oct 2022 23:53:08 +0100
Subject: [PATCH] Sonar: phpsecurity:S5131

---
 app/public/upload.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/public/upload.php b/app/public/upload.php
index cd9ce2a..394164a 100644
--- a/app/public/upload.php
+++ b/app/public/upload.php
@@ -6,6 +6,8 @@
     $updates = get_updates($db, $request);
     $authorised_users = get_subscribers($db, $request);
     $is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
+
+    $rid = htmlspecialchars($_GET['rid']);
 ?>
 
 
@@ -131,7 +133,7 @@
                     <div class="form-group" style="margin: 2%;">
                       <input type="file" class="form-control-file" id="file" name="file">
                       <button type="submit" class="btn btn-primary" style="margin-top: 2%;">Submit</button>
-                      <a href="/view?rid=<?php echo($_GET['rid']); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
+                      <a href="/view?rid=<?php echo($rid); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
                     </div>
                   </form>
               </div>