note 50307 rejected from function.htmlspecialchars by nlopess
| From: | nlopess@php.net | Date: | Thu, 24 Feb 2005 18:49:00 +0000 |
| Subject: | note 50307 rejected from function.htmlspecialchars by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-85487@lists.php.net to get a copy of this message | ||
Note Submitter: vino at pf dot pl
----
I have this :
[code]<?
$path="newsy/";
@require("get.php");
if($_SERVER['HTTP_REFERER']!=$referer){
echo "<center><br><br>Nie masz prawa tu byæ !</CENTER>";
exit();
}
if($HTTP_GET_VARS['mode']!="dodaj"){
echo "nieprawidlowy parametr!";
exit();
}
?>
<?
$nr=1;
while(file_exists($path.$nr.'.txt'))
{
$nr++;
}
$dzien=date("w");
$dzien2=date("d");
$miesiac=date("m");
$rok=date("Y");
switch ($dzien)
{
case '1': $dzien = 'Poniedzia³ek';break;
case '2': $dzien = 'Wtorek'; break;
case '3': $dzien = 'roda'; break;
case '4': $dzien = 'Czwartek'; break;
case '5': $dzien = 'Piatek'; break;
case '6': $dzien = 'Sobota'; break;
case '0': $dzien = 'Niedziela'; break;
}
switch ($miesiac)
{
case '01': $miesiac = 'Stycznia'; break;
case '02': $miesiac = 'Lutego'; break;
case '03': $miesiac = 'Marca'; break;
case '04': $miesiac = 'Kwietnia'; break;
case '05': $miesiac = 'Maja'; break;
case '06': $miesiac = 'Czerwca'; break;
case '07': $miesiac = 'Lipca'; break;
case '08': $miesiac = 'Sierpnia'; break;
case '09': $miesiac = 'Wrzenia'; break;
case '10': $miesiac = 'Padziernika'; break;
case '11': $miesiac = 'Listopada'; break;
case '12': $miesiac = 'Grudnia'; break;
}
$_POST['tytul']=stripslashes(htmlspecialchars($_POST['tytul']));
$_POST['tresc']=stripslashes(htmlspecialchars($_POST['tresc']));
$_POST['tytul']=str_replace("\r\n","",$_POST['tytul']);
$_POST['tresc']=str_replace("\r\n","<br>",$_POST['tresc']);
$FileToWrite=@fopen($path.$nr.'.txt',"w");
@chmod($path.$nr.'.txt', 0666);
@flock($FileToWrite, 2);
@fwrite($FileToWrite,$nr."\n");
@fwrite($FileToWrite,$_POST['name']."\n");
@fwrite($FileToWrite,$nr."|**|".$_POST['tresc']."|**|\n");
@fwrite($FileToWrite,"$dzien $dzien2 $miesiac $rok\n");
@fwrite($FileToWrite,$_POST['tytul']);
@flock($FileToWrite, 3);
@fclose($FileToWrite);
@header("location: ok.php");
exit();
?>
[/code]
How I can change this :
"htmlspecialchars" in my PHPnews