com web/master: Actually, events can drop escaping on display entirely.: manage/event.php

Commit: df7bdd319e089959378562f00e658a508a5f73f6 Author: Daniel P. Brown <danbrown@php.net> Wed, 16 May 2012 18:12:56 -0400 Parents: 6b63fb533684ef73ed7959f02202d181ed613bce Branches: master Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=df7bdd319e089959378562f00e658a508a5f73f6 Log: Actually, events can drop escaping on display entirely. Changed paths: M manage/event.php Diff: diff --git a/manage/event.php b/manage/event.php index 0767901..8cf8e58 100644 --- a/manage/event.php +++ b/manage/event.php @@ -285,16 +285,16 @@ while ($row = mysql_fetch_array($res,MYSQL_ASSOC)) { ?> <tr bgcolor="<?php echo $color;?>"> <td align="center"><a href="<?php echo PHP_SELF . "?id=$row[id]";?>">edit</a></td> - <td><?php echo escape(html_entity_decode($row['sdato'],ENT_QUOTES));?></td> - <td><?php echo escape(html_entity_decode($row['sdesc'],ENT_QUOTES));?></td> - <td><?php echo escape(html_entity_decode($row['email'],ENT_QUOTES));?></td> - <td><?php echo escape(html_entity_decode($row['cname'],ENT_QUOTES));?></td> - <td><?php echo escape(html_entity_decode($cat[$row['category']],ENT_QUOTES));?></td> + <td><?php echo html_entity_decode($row['sdato'],ENT_QUOTES);?></td> + <td><?php echo html_entity_decode($row['sdesc'],ENT_QUOTES);?></td> + <td><?php echo html_entity_decode($row['email'],ENT_QUOTES);?></td> + <td><?php echo html_entity_decode($row['cname'],ENT_QUOTES);?></td> + <td><?php echo html_entity_decode($cat[$row['category']],ENT_QUOTES);?></td> </tr> <?php if ($full && $row['ldesc']) {?> <tr bgcolor="<?php echo $color;?>"> - <td></td><td colspan="3"><?php echo escape(html_entity_decode($row['ldesc'],ENT_QUOTES));?></td> + <td></td><td colspan="3"><?php echo html_entity_decode($row['ldesc'],ENT_QUOTES);?></td> </tr> <?php } @@ -324,6 +324,6 @@ function display_options($options,$current) { foreach ($options as $k => $v) { echo '<option value="', $k, '"', ($k == $current ? ' selected="selected"' : ''), - '>', escape(html_entity_decode($v,ENT_QUOTES)), "</option>\n"; + '>', html_entity_decode($v,ENT_QUOTES), "</option>\n"; } }