Changeset 230 for branches/awmn/includes/pages/pickup/pickup_gmap.php

Timestamp:

01/09/2010 05:02:33 PM (2 years ago)

Author:

Acinonyx

Message:

[awmn] Escape HTML special characters

File:

• branches/awmn/includes/pages/pickup/pickup_gmap.php (modified) (2 diffs)

branches/awmn/includes/pages/pickup/pickup_gmap.php

@@ -4 +4 @@
  *
  * Copyright (C) 2005 Nikolaos Nikalexis <winner@cube.gr>
+ * Copyright (C) 2010 Vasilis Tsiligiannis <b_tsiligiannis@silverton.gr>
  * 
  * This program is free software; you can redistribute it and/or modify
@@ -34 +35 @@
                 $main->menu->hide = TRUE;
                 $main->footer->hide = TRUE;
-                $this->tpl['gmap_key_ok'] = include_gmap("?page=gmap&subpage=pickup_js&object_lat=".stripslashes(get('object_lat'))."&object_lon=".stripslashes(get('object_lon')));
+                $this->tpl['gmap_key_ok'] = include_gmap(htmlspecialchars("?page=gmap&subpage=pickup_js&object_lat=".stripslashes(get('object_lat'))."&object_lon=".stripslashes(get('object_lon'))));
                 return template($this->tpl, __FILE__);
         }