holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

added some htmlspecialchars() to the values of input and textarea, to allow transparent use of " and '

Browse Source
This commit is contained in:
Ralf Becker 2003-06-14 13:47:41 +00:00
parent 7b12e0880c
commit 6ce761812e
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
etemplate/inc/class.html.inc.php
View File

@ -63,7 +63,7 @@ class html
} }
while (list($k,$text) = each($arr)) while (list($k,$text) = each($arr))
{ {
$out .= '<option value="'.$k.'"'; $out .= '<option value="'.htmlspecialchars($k).'"';
if("$k" == "$key" || strstr(",$key,",",$k,")) if("$k" == "$key" || strstr(",$key,",",$k,"))
{ {
$out .= " SELECTED"; $out .= " SELECTED";
@ -99,14 +99,14 @@ class html
function textarea($name,$value='',$options='' ) function textarea($name,$value='',$options='' )
{ {
return "<TEXTAREA name=\"$name\" $options>$value</TEXTAREA>\n"; return "<TEXTAREA name=\"$name\" $options>".htmlspecialchars($value)."</TEXTAREA>\n";
} }
function input($name,$value='',$type='',$options='' ) function input($name,$value='',$type='',$options='' )
{ {
if ($type) $type = 'TYPE="'.$type.'"'; if ($type) $type = 'TYPE="'.$type.'"';
return "<INPUT $type NAME=\"$name\" VALUE=\"$value\" $options>\n"; return "<INPUT $type NAME=\"$name\" VALUE=\"".htmlspecialchars($value)."\" $options>\n";
} }
function submit_button($name,$lang,$onClick='',$no_lang=0,$options='',$image='',$app='') function submit_button($name,$lang,$onClick='',$no_lang=0,$options='',$image='',$app='')