From 44d89d94718883e4d108e9ee74b1abaaa015eaca Mon Sep 17 00:00:00 2001
From: rootcoma <rootcoma@gmail.com>
Date: Sun, 1 Dec 2013 16:59:48 -0800
Subject: [PATCH] rawurlencode usernames when linking to profile

---
 php/stats.php | 8 ++++----
 php/user.php  | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/php/stats.php b/php/stats.php
index 620e394..2f1bedf 100644
--- a/php/stats.php
+++ b/php/stats.php
@@ -78,7 +78,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
@@ -113,7 +113,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
@@ -149,7 +149,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
@@ -183,7 +183,7 @@ try {
             foreach($result as $key=>$res) {
               echo '<tr>';
               echo '<td>' . ($key+1) . '</td>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '</tr>';
             }
diff --git a/php/user.php b/php/user.php
index 0a2efee..decb81f 100644
--- a/php/user.php
+++ b/php/user.php
@@ -135,7 +135,7 @@ if(count($users) == 1) {
             <?php
             foreach($users as $res) {
               echo '<tr>';
-              echo '<td><a href="profile.php?username=' . $res['username'] . '">' . $res['username'] . '</a></td>';
+              echo '<td><a href="profile.php?username=' . rawurlencode($res['username']) . '">' . $res['username'] . '</a></td>';
               echo '<td>' . number_format($res['points'],0) . '</td>';
               echo '<td>' . number_format($res['total'],0) . '</td>';
               echo '</tr>';