From 44e74ffef5b4a936ec91b91a5a318afb51cb5399 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Tue, 14 Jul 2026 01:00:13 +0000
Subject: [PATCH] Fix data exposure vulnerability in users.php

Co-authored-by: tsainez <13399044+tsainez@users.noreply.github.com>
---
 php/structure/users.php | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/php/structure/users.php b/php/structure/users.php
index 0735aef..caaf92d 100644
--- a/php/structure/users.php
+++ b/php/structure/users.php
@@ -18,9 +18,21 @@
 		# commented it out because we don't actually want it to be fatal
 	}
 
-	echo "<pre>";
-	var_dump($results->fetchAll(PDO::FETCH_ASSOC));
-	echo "</pre>";
+	if (isset($results) && $results) {
+		$users = $results->fetchAll(PDO::FETCH_ASSOC);
+		echo "<ul>\n";
+		foreach ($users as $user) {
+			echo "<li>\n";
+			foreach ($user as $key => $value) {
+				if (stripos($key, 'password') !== false) {
+					continue; // Skip sensitive fields
+				}
+				echo htmlspecialchars($key) . ": " . htmlspecialchars((string)$value) . "<br>\n";
+			}
+			echo "</li>\n";
+		}
+		echo "</ul>\n";
+	}
 
 	include 'footer.php';