diff options
author | Loui Chang <louipc.ist@gmail.com> | 2009-10-26 12:54:31 -0400 |
---|---|---|
committer | Loui Chang <louipc.ist@gmail.com> | 2009-10-26 12:54:31 -0400 |
commit | d29a7a5a6739198a080007aad0506f831b736fe1 (patch) | |
tree | eb091cfa75271c3e0a66657cbbef97764dc466c3 /web/template | |
parent | 075ca25f02175c2cb629628821e8e150c383f569 (diff) |
pkg_search_results: Translate special characters to html entities.
Reported-by: Cedric Staniewski <cedric@gmx.ca>
Signed-off-by: Loui Chang <louipc.ist@gmail.com>
Diffstat (limited to 'web/template')
-rw-r--r-- | web/template/pkg_search_results.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/web/template/pkg_search_results.php b/web/template/pkg_search_results.php index bdb5f6c..b4415d7 100644 --- a/web/template/pkg_search_results.php +++ b/web/template/pkg_search_results.php @@ -67,7 +67,7 @@ for ($i = 0; $row = mysql_fetch_assoc($result); $i++) { <?php endif; ?> <?php endif; ?> <td class='<?php print $c ?>'><span class='f4'><span class='blue'> - <?php print $row["Description"] ?></span></span></td> + <?php print htmlspecialchars($row['Description'], ENT_QUOTES); ?></span></span></td> <td class='<?php print $c ?>'><span class='f5'><span class='blue'> <?php if (isset($row["Maintainer"])): ?> <a href='packages.php?K=<?php print $row['Maintainer'] ?>&SeB=m'><?php print $row['Maintainer'] ?></a> |