adding changes till 2019-03-13

[friendica.git] / mod / oexchange.php

diff --git a/mod/oexchange.php b/mod/oexchange.php
index 296869aac9eb0d9f1f12afd2b8285c9063522c4e..e042a22f52038f9a47b4fe7f7edc821c429ea356 100644 (file)
--- a/mod/oexchange.php
+++ b/mod/oexchange.php
@@ -8,6 +8,7 @@ use Friendica\Core\Renderer;
 use Friendica\Core\System;
 use Friendica\Module\Login;
 use Friendica\Util\Network;
+use Friendica\Util\Strings;
 
 function oexchange_init(App $a) {
 
@@ -16,7 +17,7 @@ function oexchange_init(App $a) {
 
                $o = Renderer::replaceMacros($tpl, ['$base' => System::baseUrl()]);
                echo $o;
-               killme();
+               exit();
        }
 }
 
@@ -32,14 +33,14 @@ function oexchange_content(App $a) {
                return;
        }
 
-       $url = ((x($_REQUEST,'url') && strlen($_REQUEST['url']))
-               ? urlencode(notags(trim($_REQUEST['url']))) : '');
-       $title = ((x($_REQUEST,'title') && strlen($_REQUEST['title']))
-               ? '&title=' . urlencode(notags(trim($_REQUEST['title']))) : '');
-       $description = ((x($_REQUEST,'description') && strlen($_REQUEST['description']))
-               ? '&description=' . urlencode(notags(trim($_REQUEST['description']))) : '');
-       $tags = ((x($_REQUEST,'tags') && strlen($_REQUEST['tags']))
-               ? '&tags=' . urlencode(notags(trim($_REQUEST['tags']))) : '');
+       $url = ((!empty($_REQUEST['url']))
+               ? urlencode(Strings::escapeTags(trim($_REQUEST['url']))) : '');
+       $title = ((!empty($_REQUEST['title']))
+               ? '&title=' . urlencode(Strings::escapeTags(trim($_REQUEST['title']))) : '');
+       $description = ((!empty($_REQUEST['description']))
+               ? '&description=' . urlencode(Strings::escapeTags(trim($_REQUEST['description']))) : '');
+       $tags = ((!empty($_REQUEST['tags']))
+               ? '&tags=' . urlencode(Strings::escapeTags(trim($_REQUEST['tags']))) : '');
 
        $s = Network::fetchUrl(System::baseUrl() . '/parse_url?f=&url=' . $url . $title . $description . $tags);