From 36e819ec412147f01e8c8d6e53c4e44a73cec9df Mon Sep 17 00:00:00 2001
From: shish <shish@7f39781d-f577-437e-ae19-be835c7a54ca>
Date: Mon, 16 Jul 2007 07:29:14 +0000
Subject: [PATCH] html_escape the links before putting them into textboxes

git-svn-id: file:///home/shish/svn/shimmie2/trunk@288 7f39781d-f577-437e-ae19-be835c7a54ca
---
 contrib/link_image/theme.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/contrib/link_image/theme.php b/contrib/link_image/theme.php
index c0d483e6..c7a09be6 100644
--- a/contrib/link_image/theme.php
+++ b/contrib/link_image/theme.php
@@ -65,7 +65,7 @@ class LinkImageTheme extends Themelet {
 	
 	private function link_code($label,$content,$id=NULL) {
 		return	"<label for='".$id."' title='Click to select the textbox'>$label</label>\n".
-				"<input type='text' readonly='readonly' id='".$id."' name='".$id."' value='".$content."' onfocus='this.select();'></input>\n<br/>\n";
+				"<input type='text' readonly='readonly' id='".$id."' name='".$id."' value='".html_escape($content)."' onfocus='this.select();'></input>\n<br/>\n";
 	}
 }
 ?>