From 9dfba1e70866fb2bb551678f6e04b8ddfd5467e1 Mon Sep 17 00:00:00 2001 From: Starla Insigna Date: Fri, 2 Oct 2009 19:04:20 -0400 Subject: Fixed HTML Entites problem When the poll escaping problem was fixed, a whole ton of other similar bugs were found which were also fixed here. Fixes #115 --- admin/editLink.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'admin/editLink.php') diff --git a/admin/editLink.php b/admin/editLink.php index fe4fb66..f3ba9cc 100644 --- a/admin/editLink.php +++ b/admin/editLink.php @@ -74,10 +74,10 @@ if (isset($_GET['submit'])) $template->adds_block('FLASH', array('TEXT' => 'Your link has been sucessfully edited.')); } - $template->add('TITLEVALUE', $_POST['title']); + $template->add('TITLEVALUE', htmlentities($_POST['title'])); $template->add('URLVALUE', $_POST['url']); } else { - $template->add('TITLEVALUE', $getlink3['title']); + $template->add('TITLEVALUE', htmlentities($getlink3['title'])); $template->add('URLVALUE', $getlink3['url']); } -- cgit 1.4.1