com web/master: Fixing parts of the filtration for events, too.: manage/event.php

Commit: 72b128faae8557bf74174df36803178b29369e09 Author: Daniel P. Brown <danbrown@php.net> Wed, 16 May 2012 17:56:36 -0400 Parents: 7f6309be341d14ccc0231c9704925dbb61101995 Branches: master Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=72b128faae8557bf74174df36803178b29369e09 Log: Fixing parts of the filtration for events, too. Changed paths: M manage/event.php Diff: diff --git a/manage/event.php b/manage/event.php index c5161b7..38aa0ea 100644 --- a/manage/event.php +++ b/manage/event.php @@ -285,16 +285,16 @@ while ($row = mysql_fetch_array($res,MYSQL_ASSOC)) { ?> <tr bgcolor="<?php echo $color;?>"> <td align="center"><a href="<?php echo PHP_SELF . "?id=$row[id]";?>">edit</a></td> - <td><?php echo hscr($row['sdato']);?></td> - <td><?php echo hscr($row['sdesc']);?></td> - <td><?php echo hscr($row['email']);?></td> - <td><?php echo hscr($row['cname']);?></td> - <td><?php echo $cat[$row['category']];?></td> + <td><?php echo escape(html_entity_decode($row['sdato'],ENT_QUOTES));?></td> + <td><?php echo escape(html_entity_decode($row['sdesc'],ENT_QUOTES));?></td> + <td><?php echo escape(html_entity_decode($row['email'],ENT_QUOTES));?></td> + <td><?php echo escape(html_entity_decode($row['cname'],ENT_QUOTES));?></td> + <td><?php echo escape(html_entity_decode($cat[$row['category']],ENT_QUOTES));?></td> </tr> <?php if ($full && $row['ldesc']) {?> <tr bgcolor="<?php echo $color;?>"> - <td></td><td colspan="3"><?php echo hscr($row['ldesc']);?></td> + <td></td><td colspan="3"><?php echo escape(html_entity_decode($row['ldesc'],ENT_QUOTES));?></td> </tr> <?php } @@ -324,6 +324,6 @@ function display_options($options,$current) { foreach ($options as $k => $v) { echo '<option value="', $k, '"', ($k == $current ? ' selected="selected"' : ''), - '>', hscr($v), "</option>\n"; + '>', escape(html_entity_decode($v,ENT_QUOTES)), "</option>\n"; } }