html_escape the links before putting them into textboxes

git-svn-id: file:///home/shish/svn/shimmie2/trunk@288 7f39781d-f577-437e-ae19-be835c7a54ca
This commit is contained in:
shish 2007-07-16 07:29:14 +00:00
parent c8186776a4
commit 36e819ec41

View file

@ -65,7 +65,7 @@ class LinkImageTheme extends Themelet {
private function link_code($label,$content,$id=NULL) {
return "<label for='".$id."' title='Click to select the textbox'>$label</label>\n".
"<input type='text' readonly='readonly' id='".$id."' name='".$id."' value='".$content."' onfocus='this.select();'></input>\n<br/>\n";
"<input type='text' readonly='readonly' id='".$id."' name='".$id."' value='".html_escape($content)."' onfocus='this.select();'></input>\n<br/>\n";
}
}
?>