com web/master: Missed a few.: manage/event.php
| From: | Daniel P. Brown | Date: | Wed, 16 May 2012 22:01:48 +0000 |
| Subject: | com web/master: Missed a few.: manage/event.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-13545@lists.php.net to get a copy of this message | ||
Commit: 1ed649223f938b14b42630f555cd16b490c66422
Author: Daniel P. Brown <danbrown@php.net> Wed, 16 May 2012 18:01:48 -0400
Parents: 72b128faae8557bf74174df36803178b29369e09
Branches: master
Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=1ed649223f938b14b42630f555cd16b490c66422
Log:
Missed a few.
Changed paths:
M manage/event.php
Diff:
diff --git a/manage/event.php b/manage/event.php
index 38aa0ea..e2845f0 100644
--- a/manage/event.php
+++ b/manage/event.php
@@ -151,7 +151,7 @@ if ($id) {
</tr>
<tr>
<th>Short<br>Description</th>
- <td><input type="text" name="in[sdesc]" value="<?php echo
hsc($in['sdesc'])?>" size="32" maxlength="32" /></td>
+ <td><input type="text" name="in[sdesc]" value="<?php echo
escape(html_entity_decode($in['sdesc'],ENT_QUOTES))?>" size="32"
maxlength="32" /></td>
</tr>
<tr>
<th>Country</th>
@@ -174,17 +174,17 @@ if ($id) {
</tr>
<tr>
<th>Email</th>
- <td><input type="text" name="in[email]" size="40"
maxlength="128" value="<?php echo hsc($in['email'])?>"
/></td>
+ <td><input type="text" name="in[email]" size="40"
maxlength="128" value="<?php echo
escape(html_entity_decode($in['email'],ENT_QUOTES))?>" /></td>
</tr>
<tr>
<th>URL</th>
- <td><input type="text" name="in[url]" size="40"
maxlength="128" value="<?php echo hsc($in['url'])?>"
/></td>
+ <td><input type="text" name="in[url]" size="40"
maxlength="128" value="<?php echo
escape(html_entity_decode($in['url'],ENT_QUOTES))?>" /></td>
</tr>
<tr>
<th colspan="2" align="left">Long Description</th>
</tr>
<tr>
- <td colspan="2"><textarea name="in[ldesc]" cols="60"
rows="10" wrap="virtual"><?php echo
hsc($in['ldesc']);?></textarea></td>
+ <td colspan="2"><textarea name="in[ldesc]" cols="60"
rows="10" wrap="virtual"><?php echo
escape(html_entity_decode($in['ldesc'],ENT_QUOTES));?></textarea></td>
</tr>
<tr>
<td align="center" colspan="2">