cvs: phpweb /include layout.inc

rasmus Tue May 8 04:35:59 2007 UTC Modified files: /phpweb/include layout.inc Log: Entity quotes as well here http://cvs.php.net/viewvc.cgi/phpweb/include/layout.inc?r1=1.266&r2=1.267&diff_format=u Index: phpweb/include/layout.inc diff -u phpweb/include/layout.inc:1.266 phpweb/include/layout.inc:1.267 --- phpweb/include/layout.inc:1.266 Mon Apr 2 09:15:50 2007 +++ phpweb/include/layout.inc Tue May 8 04:35:59 2007 @@ -1,5 +1,5 @@ <?php -/* $Id: layout.inc,v 1.266 2007/04/02 09:15:50 philip Exp $ */ +/* $Id: layout.inc,v 1.267 2007/05/08 04:35:59 rasmus Exp $ */ // Set the static content root differently on php.net $_SERVER['STATIC_ROOT'] = ($MYSITE == 'http://www.php.net/') ? @@ -394,9 +394,9 @@ // function make_popup_link ($url, $linktext=false, $target=false, $windowprops="", $extras=false) { return sprintf("<a href=\"%s\" target=\"%s\" onclick=\"window.open('%s','%s','%s');return false;\"%s>%s</a>", - htmlspecialchars($url), + htmlspecialchars($url, ENT_QUOTES), ($target ? $target : "_new"), - htmlspecialchars($url), + htmlspecialchars($url, ENT_QUOTES), ($target ? $target : "_new"), $windowprops, ($extras ? ' '.$extras : ''), @@ -468,7 +468,7 @@ } function clean($var) { - return htmlspecialchars(get_magic_quotes_gpc() ? stripslashes($var) : $var); + return htmlspecialchars(get_magic_quotes_gpc() ? stripslashes($var) : $var, ENT_QUOTES); } // Clean out the content of one user note for printing to HTML