From a0035707b84c64deea97aa31a054c0a4aa720c97 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Fri, 21 Oct 2022 23:51:31 +0100
Subject: [PATCH] Sonar: phpsecurity:S5131

---
 app/public/update.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/public/update.php b/app/public/update.php
index d5c87fd..0ef4a4c 100644
--- a/app/public/update.php
+++ b/app/public/update.php
@@ -6,6 +6,8 @@
     $updates = get_updates($db, $request);
     $authorised_users = get_subscribers($db, $request);
     $is_authorised = isAuthorised($_SESSION['uuid'], $authorised_users, $request);
+
+    $rid = htmlspecialchars($_GET['rid'])
 ?>
 
 
@@ -131,7 +133,7 @@
                     <div class="form-group" style="margin: 2%;">
                       <textarea type="text" class="form-control" id="msg" name="msg" rows="3"></textarea>
                       <button type="submit" class="btn btn-primary" style="margin-top: 2%;">Submit</button>
-                      <a href="/view?rid=<?php echo($_GET['rid']); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
+                      <a href="/view?rid=<?php echo($rid); ?>" class="btn btn-danger" style="margin-top: 2%;">Cancel</a>
                     </div>
                   </form>
               </div>