1 files changed, 9 insertions, 9 deletions
diff --git a/pages/quotes.php b/pages/quotes.php
index 17057c2..3b00878 100755
--- a/pages/quotes.php
+++ b/pages/quotes.php

@@ -25,31 +25,31 @@ require('headerproc.php');
 $pageCategory = 'quotes';
 $hatNav = array(        array(  'title' => 'Latest',
-                                                        'url' => 'http://fourisland.com/quotes/latest.php',
+                                                        'url' => '/quotes/latest.php',
                                                        'icon' => '16-star-hot'
                                        ),
                                        array(  'title' => 'Best',
-                                                        'url' => 'http://fourisland.com/quotes/top.php',
+                                                        'url' => '/quotes/top.php',
                                                        'icon' => 'medal_gold_1'
                                        ),
                                        array(  'title' => 'Worst',
-                                                        'url' => 'http://fourisland.com/quotes/bottom.php',
+                                                        'url' => '/quotes/bottom.php',
                                                        'icon' => '16-message-warn'
                                        ),
                                        array(  'title' => 'Browse All',
-                                                        'url' => 'http://fourisland.com/quotes/browse.php',
+                                                        'url' => '/quotes/browse.php',
                                                        'icon' => '16-file-archive'
                                        ),
                                        array(  'title' => 'Random',
-                                                        'url' => 'http://fourisland.com/quotes/random.php',
+                                                        'url' => '/quotes/random.php',
                                                        'icon' => '16-clock'
                                        ),
                                        array(  'title' => 'Add',
-                                                        'url' => 'http://fourisland.com/quotes/add.php',
+                                                        'url' => '/quotes/add.php',
                                                        'icon' => '16-em-pencil'
                                        ),
                                        array(  'title' => 'Search',
-                                                        'url' => 'http://fourisland.com/quotes/search.php',
+                                                        'url' => '/quotes/search.php',
                                                        'icon' => 'book_open'
                                        ));
@@ -70,7 +70,7 @@ if (isset($_GET['id']) && !(is_numeric($_GET['id'])))
        $template = new FITemplate('quotes/add');
        if (isset($_GET['submit']))
        {
-                $template->adds_block('SUBMITTED',array('QUOTE' => str_replace("\n","<br />",htmlentities(stripslashes($_POST['rash_quote'])))));
+                $template->adds_block('SUBMITTED',array('QUOTE' => str_replace("\n","<br />",htmlspecialchars(stripslashes($_POST['rash_quote'])))));
                if (!isLoggedIn())
                {
                        $insquote = "INSERT INTO rash_queue (quote) VALUES(\"" . mysql_real_escape_string(htmlspecialchars($_POST['rash_quote'])) . "\")";
@@ -236,7 +236,7 @@ function quote_generation($query, $origin, $page = 1, $quote_limit = 50, $page_l
                $template->add_ref($curID,'QUOTES',array(       'NUMBER' => $getquotes3[$i]['id'],
                                                                'RATING' => $getquotes3[$i]['rating'],
                                                                'DATE' => ($getquotes3[$i]['date'] != 0 ? date('F jS Y \a\\t g:i:s a', $getquotes3[$i]['date']) : ''),
-                                                                'QUOTE' => str_replace("\n","<br />",htmlentities(stripslashes($getquotes3[$i]['quote']))),
+                                                                'QUOTE' => doAprilFoolsDay(str_replace("\n","<br />",htmlspecialchars(stripslashes($getquotes3[$i]['quote'])))),
                                                                'COMMENTS' => $comments));
                if (($gettrack3['ip'] != $_SERVER['REMOTE_ADDR']) || (array_search($getquotes3[$i]['id'],$trackArr) === FALSE))

diff --git a/pages/quotes.php b/pages/quotes.php index 17057c2..3b00878 100755 --- a/pages/quotes.php +++ b/pages/quotes.php
@@ -25,31 +25,31 @@ require('headerproc.php');
25	$pageCategory = 'quotes';	25	$pageCategory = 'quotes';
26		26
27	$hatNav = array( array( 'title' => 'Latest',	27	$hatNav = array( array( 'title' => 'Latest',
28	'url' => 'http://fourisland.com/quotes/latest.php',	28	'url' => '/quotes/latest.php',
29	'icon' => '16-star-hot'	29	'icon' => '16-star-hot'
30	),	30	),
31	array( 'title' => 'Best',	31	array( 'title' => 'Best',
32	'url' => 'http://fourisland.com/quotes/top.php',	32	'url' => '/quotes/top.php',
33	'icon' => 'medal_gold_1'	33	'icon' => 'medal_gold_1'
34	),	34	),
35	array( 'title' => 'Worst',	35	array( 'title' => 'Worst',
36	'url' => 'http://fourisland.com/quotes/bottom.php',	36	'url' => '/quotes/bottom.php',
37	'icon' => '16-message-warn'	37	'icon' => '16-message-warn'
38	),	38	),
39	array( 'title' => 'Browse All',	39	array( 'title' => 'Browse All',
40	'url' => 'http://fourisland.com/quotes/browse.php',	40	'url' => '/quotes/browse.php',
41	'icon' => '16-file-archive'	41	'icon' => '16-file-archive'
42	),	42	),
43	array( 'title' => 'Random',	43	array( 'title' => 'Random',
44	'url' => 'http://fourisland.com/quotes/random.php',	44	'url' => '/quotes/random.php',
45	'icon' => '16-clock'	45	'icon' => '16-clock'
46	),	46	),
47	array( 'title' => 'Add',	47	array( 'title' => 'Add',
48	'url' => 'http://fourisland.com/quotes/add.php',	48	'url' => '/quotes/add.php',
49	'icon' => '16-em-pencil'	49	'icon' => '16-em-pencil'
50	),	50	),
51	array( 'title' => 'Search',	51	array( 'title' => 'Search',
52	'url' => 'http://fourisland.com/quotes/search.php',	52	'url' => '/quotes/search.php',
53	'icon' => 'book_open'	53	'icon' => 'book_open'
54	));	54	));
55		55
@@ -70,7 +70,7 @@ if (isset($_GET['id']) && !(is_numeric($_GET['id'])))
70	$template = new FITemplate('quotes/add');	70	$template = new FITemplate('quotes/add');
71	if (isset($_GET['submit']))	71	if (isset($_GET['submit']))
72	{	72	{
73	$template->adds_block('SUBMITTED',array('QUOTE' => str_replace("\n","<br />",htmlentities(stripslashes($_POST['rash_quote'])))));	73	$template->adds_block('SUBMITTED',array('QUOTE' => str_replace("\n","<br />",htmlspecialchars(stripslashes($_POST['rash_quote'])))));
74	if (!isLoggedIn())	74	if (!isLoggedIn())
75	{	75	{
76	$insquote = "INSERT INTO rash_queue (quote) VALUES(\"" . mysql_real_escape_string(htmlspecialchars($_POST['rash_quote'])) . "\")";	76	$insquote = "INSERT INTO rash_queue (quote) VALUES(\"" . mysql_real_escape_string(htmlspecialchars($_POST['rash_quote'])) . "\")";
@@ -236,7 +236,7 @@ function quote_generation($query, $origin, $page = 1, $quote_limit = 50, $page_l
236	$template->add_ref($curID,'QUOTES',array( 'NUMBER' => $getquotes3[$i]['id'],	236	$template->add_ref($curID,'QUOTES',array( 'NUMBER' => $getquotes3[$i]['id'],
237	'RATING' => $getquotes3[$i]['rating'],	237	'RATING' => $getquotes3[$i]['rating'],
238	'DATE' => ($getquotes3[$i]['date'] != 0 ? date('F jS Y \a\\t g:i:s a', $getquotes3[$i]['date']) : ''),	238	'DATE' => ($getquotes3[$i]['date'] != 0 ? date('F jS Y \a\\t g:i:s a', $getquotes3[$i]['date']) : ''),
239	'QUOTE' => str_replace("\n","<br />",htmlentities(stripslashes($getquotes3[$i]['quote']))),	239	'QUOTE' => doAprilFoolsDay(str_replace("\n","<br />",htmlspecialchars(stripslashes($getquotes3[$i]['quote'])))),
240	'COMMENTS' => $comments));	240	'COMMENTS' => $comments));
241		241
242	if (($gettrack3['ip'] != $_SERVER['REMOTE_ADDR']) \|\| (array_search($getquotes3[$i]['id'],$trackArr) === FALSE))	242	if (($gettrack3['ip'] != $_SERVER['REMOTE_ADDR']) \|\| (array_search($getquotes3[$i]['id'],$trackArr) === FALSE))