From d09a92ef9fd1035d8f7f5c2032778b3739d5b867 Mon Sep 17 00:00:00 2001
From: SilicaAndPina <earsyum@gmail.com>
Date: Wed, 7 Jul 2021 03:23:10 +1200
Subject: [PATCH] add ?USER

---
 WebInterface/game-site/horseisle.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/WebInterface/game-site/horseisle.php b/WebInterface/game-site/horseisle.php
index 6a0333c..39e5aee 100755
--- a/WebInterface/game-site/horseisle.php
+++ b/WebInterface/game-site/horseisle.php
@@ -168,13 +168,16 @@ function DetectFlashVer(reqMajorVer, reqMinorVer, reqRevision)
 <script language="JavaScript" type="text/javascript">
 <!-- 
 <?php
+$user = "";
+if(isset($_GET['USER'])) { $user = $_GET['USER']; };
+
 echo("var hasRightVersion = DetectFlashVer(requiredMajorVersion, requiredMinorVersion, requiredRevision);
 if(hasRightVersion) {  // if we've detected an acceptable version
     var oeTags = '<object classid=\"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000\"'
     + 'width=\"790\" height=\"500\" id=\"horseisle\" name=\"horseisle\"'
     + 'codebase=\"http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab\">'
-    + '<param name=\"movie\" value=\"horseisle.swf?SERVER=".$server_ip."&PORT=".$server_port."&USER=&2158322\" /><param name=\"loop\" value=\"false\" /><param name=\"menu\" value=\"false\" /><param name=\"quality\" value=\"high\" /><param name=\"scale\" value=\"noscale\" /><param name=\"salign\" value=\"t\" /><param name=\"bgcolor\" value=\"#ffffff\" />'
-    + '<embed src=\"horseisle.swf?SERVER=".$server_ip."&PORT=".$server_port."&USER=&2158322\" loop=\"false\" menu=\"false\" quality=\"high\" scale=\"noscale\" salign=\"t\" bgcolor=\"#ffffff\" '
+    + '<param name=\"movie\" value=\"horseisle.swf?SERVER=".$server_ip."&PORT=".$server_port."&USER=".htmlspecialchars($user, ENT_QUOTES)."&2158322\" /><param name=\"loop\" value=\"false\" /><param name=\"menu\" value=\"false\" /><param name=\"quality\" value=\"high\" /><param name=\"scale\" value=\"noscale\" /><param name=\"salign\" value=\"t\" /><param name=\"bgcolor\" value=\"#ffffff\" />'
+    + '<embed src=\"horseisle.swf?SERVER=".$server_ip."&PORT=".$server_port."&USER=".htmlspecialchars($user, ENT_QUOTES)."&2158322\" loop=\"false\" menu=\"false\" quality=\"high\" scale=\"noscale\" salign=\"t\" bgcolor=\"#ffffff\" '
     + 'width=\"790\" height=\"500\" name=\"horseisle\" align=\"top\"'
     + 'play=\"true\"'
     + 'loop=\"false\"'