Changeset 234

Timestamp:

01/09/2010 07:12:36 PM (2 years ago)

Author:

Acinonyx

Message:

[awmn] Escape HTML special characters in services URLs

Location:

branches/awmn/includes/pages

Files:

• nodes/nodes_view.php (modified) (1 diff)
• services/services.php (modified) (2 diffs)

branches/awmn/includes/pages/nodes/nodes_view.php

@@ -260 +260 @@
                                         }
                                 }
-                                $table_services->info['LINK']['services__title'][$key] = $table_services->data[$key]['url'];
+                                $table_services->info['LINK']['services__title'][$key] = htmlspecialchars($table_services->data[$key]['url']);
                         }
                 }

branches/awmn/includes/pages/services/services.php

@@ -4 +4 @@
  *
  * Copyright (C) 2005 Nikolaos Nikalexis <winner@cube.gr>
+ * Copyright (C) 2010 Vasilis Tsiligiannis <b_tsiligiannis@silverton.gr>
  * 
  * This program is free software; you can redistribute it and/or modify
@@ -62 +63 @@
                                 $table_services->data[$key]['nodes__name'] .= " (#".$table_services->data[$key]['nodes__id'].")";
                                 $table_services->info['LINK']['nodes__name'][$key] = makelink(array("page" => "nodes", "node" => $table_services->data[$key]['nodes__id']));
-                                $table_services->info['LINK']['services__title'][$key] = $table_services->data[$key]['url'];
+                                $table_services->info['LINK']['services__title'][$key] = htmlspecialchars($table_services->data[$key]['url']);
                         }
                 }