summary refs log tree commit diff stats
path: root/admin/newPost.php
diff options
context:
space:
mode:
authorStarla Insigna <hatkirby@fourisland.com>2009-10-02 19:04:20 -0400
committerStarla Insigna <hatkirby@fourisland.com>2009-10-02 19:04:20 -0400
commit9dfba1e70866fb2bb551678f6e04b8ddfd5467e1 (patch)
tree81f4731ae7b2fa902226f084480e26411ac3ad71 /admin/newPost.php
parent00586f1e8ada8f5baa6e3013525862dccac77b4a (diff)
downloadfourisland-9dfba1e70866fb2bb551678f6e04b8ddfd5467e1.tar.gz
fourisland-9dfba1e70866fb2bb551678f6e04b8ddfd5467e1.tar.bz2
fourisland-9dfba1e70866fb2bb551678f6e04b8ddfd5467e1.zip
Fixed HTML Entites problem
When the poll escaping problem was fixed, a whole ton of other similar bugs were found which were also fixed here.

Fixes #115
Diffstat (limited to 'admin/newPost.php')
-rw-r--r--admin/newPost.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/admin/newPost.php b/admin/newPost.php index eb6b4e0..32e7aa2 100644 --- a/admin/newPost.php +++ b/admin/newPost.php
@@ -145,7 +145,7 @@ if (isset($_GET['submit']))
145 if ($type != 'drafts') $template->add('TAGSDISABLED', ' readonly="readonly"'); 145 if ($type != 'drafts') $template->add('TAGSDISABLED', ' readonly="readonly"');
146 } 146 }
147 147
148 $template->add('TITLEVALUE', $_POST['title']); 148 $template->add('TITLEVALUE', htmlentities($_POST['title']));
149 $template->add('TEXTVALUE', $_POST['text']); 149 $template->add('TEXTVALUE', $_POST['text']);
150 $template->add('TAGSVALUE', $_POST['tags']); 150 $template->add('TAGSVALUE', $_POST['tags']);
151 $template->add(strtoupper($_POST['type']) . 'SELECTED', ' checked="checked"'); 151 $template->add(strtoupper($_POST['type']) . 'SELECTED', ' checked="checked"');