com web/master: Don't need to escape in the forms.: manage/event.php
| From: | Daniel P. Brown | Date: | Wed, 16 May 2012 22:08:31 +0000 |
| Subject: | com web/master: Don't need to escape in the forms.: manage/event.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-13546@lists.php.net to get a copy of this message | ||
Commit: 6b63fb533684ef73ed7959f02202d181ed613bce
Author: Daniel P. Brown <danbrown@php.net> Wed, 16 May 2012 18:08:31 -0400
Parents: 1ed649223f938b14b42630f555cd16b490c66422
Branches: master
Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=6b63fb533684ef73ed7959f02202d181ed613bce
Log:
Don't need to escape in the forms..
Changed paths:
M manage/event.php
Diff:
diff --git a/manage/event.php b/manage/event.php
index e2845f0..0767901 100644
--- a/manage/event.php
+++ b/manage/event.php
@@ -151,7 +151,7 @@ if ($id) {
</tr>
<tr>
<th>Short<br>Description</th>
- <td><input type="text" name="in[sdesc]" value="<?php echo
escape(html_entity_decode($in['sdesc'],ENT_QUOTES))?>" size="32"
maxlength="32" /></td>
+ <td><input type="text" name="in[sdesc]" value="<?php echo
html_entity_decode($in['sdesc'],ENT_QUOTES)?>" size="32"
maxlength="32" /></td>
</tr>
<tr>
<th>Country</th>
@@ -174,17 +174,17 @@ if ($id) {
</tr>
<tr>
<th>Email</th>
- <td><input type="text" name="in[email]" size="40"
maxlength="128" value="<?php echo
escape(html_entity_decode($in['email'],ENT_QUOTES))?>" /></td>
+ <td><input type="text" name="in[email]" size="40"
maxlength="128" value="<?php echo
html_entity_decode($in['email'],ENT_QUOTES)?>" /></td>
</tr>
<tr>
<th>URL</th>
- <td><input type="text" name="in[url]" size="40"
maxlength="128" value="<?php echo
escape(html_entity_decode($in['url'],ENT_QUOTES))?>" /></td>
+ <td><input type="text" name="in[url]" size="40"
maxlength="128" value="<?php echo
html_entity_decode($in['url'],ENT_QUOTES)?>" /></td>
</tr>
<tr>
<th colspan="2" align="left">Long Description</th>
</tr>
<tr>
- <td colspan="2"><textarea name="in[ldesc]" cols="60"
rows="10" wrap="virtual"><?php echo
escape(html_entity_decode($in['ldesc'],ENT_QUOTES));?></textarea></td>
+ <td colspan="2"><textarea name="in[ldesc]" cols="60"
rows="10" wrap="virtual"><?php echo
html_entity_decode($in['ldesc'],ENT_QUOTES);?></textarea></td>
</tr>
<tr>
<td align="center" colspan="2">