note 50307 rejected from function.htmlspecialchars by nlopess

From: Date: Thu, 24 Feb 2005 18:49:00 +0000
Subject: note 50307 rejected from function.htmlspecialchars by nlopess
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-85487@lists.php.net to get a copy of this message
Note Submitter: vino at pf dot pl ---- I have this : [code]<? $path="newsy/"; @require("get.php"); if($_SERVER['HTTP_REFERER']!=$referer){ echo "<center><br><br>Nie masz prawa tu byæ !</CENTER>"; exit(); } if($HTTP_GET_VARS['mode']!="dodaj"){ echo "nieprawidlowy parametr!"; exit(); } ?> <? $nr=1; while(file_exists($path.$nr.'.txt')) { $nr++; } $dzien=date("w"); $dzien2=date("d"); $miesiac=date("m"); $rok=date("Y"); switch ($dzien) { case '1': $dzien = 'Poniedzia³ek';break; case '2': $dzien = 'Wtorek'; break; case '3': $dzien = 'Œroda'; break; case '4': $dzien = 'Czwartek'; break; case '5': $dzien = 'Piatek'; break; case '6': $dzien = 'Sobota'; break; case '0': $dzien = 'Niedziela'; break; } switch ($miesiac) { case '01': $miesiac = 'Stycznia'; break; case '02': $miesiac = 'Lutego'; break; case '03': $miesiac = 'Marca'; break; case '04': $miesiac = 'Kwietnia'; break; case '05': $miesiac = 'Maja'; break; case '06': $miesiac = 'Czerwca'; break; case '07': $miesiac = 'Lipca'; break; case '08': $miesiac = 'Sierpnia'; break; case '09': $miesiac = 'Wrzeœnia'; break; case '10': $miesiac = 'PaŸdziernika'; break; case '11': $miesiac = 'Listopada'; break; case '12': $miesiac = 'Grudnia'; break; } $_POST['tytul']=stripslashes(htmlspecialchars($_POST['tytul'])); $_POST['tresc']=stripslashes(htmlspecialchars($_POST['tresc'])); $_POST['tytul']=str_replace("\r\n","",$_POST['tytul']); $_POST['tresc']=str_replace("\r\n","<br>",$_POST['tresc']); $FileToWrite=@fopen($path.$nr.'.txt',"w"); @chmod($path.$nr.'.txt', 0666); @flock($FileToWrite, 2); @fwrite($FileToWrite,$nr."\n"); @fwrite($FileToWrite,$_POST['name']."\n"); @fwrite($FileToWrite,$nr."|**|".$_POST['tresc']."|**|\n"); @fwrite($FileToWrite,"$dzien $dzien2 $miesiac $rok\n"); @fwrite($FileToWrite,$_POST['tytul']); @flock($FileToWrite, 3); @fclose($FileToWrite); @header("location: ok.php"); exit(); ?> [/code] How I can change this : "htmlspecialchars" in my PHPnews

« previous php.notes (#85487) next »