From f7a4fc68ebb58d98851580ca5dd5e016ca81799b Mon Sep 17 00:00:00 2001
From: laf <neil@lathwood.co.uk>
Date: Fri, 27 Mar 2015 16:59:58 +0000
Subject: [PATCH] Fixing a scrut issue for xss

---
 html/pages/eventlog.inc.php | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/html/pages/eventlog.inc.php b/html/pages/eventlog.inc.php
index 02fa4fbc4..bd6743253 100644
--- a/html/pages/eventlog.inc.php
+++ b/html/pages/eventlog.inc.php
@@ -63,8 +63,7 @@ var grid = $("#eventlog").bootgrid({
     {
         return {
             id: "eventlog",
-            string: '<?php echo $_POST['string']; ?>',
-            device: '<?php echo $_POST['device']; ?>'
+            device: '<?php echo htmlspecialchars($_POST['device']); ?>'
         };
     },
     url: "/ajax_table.php"