Project

General

Profile

« Previous | Next » 

Revision 396

Added by Matthias almost 18 years ago

Fixed problem with Page Title has to be escaped (#287)

View differences:

trash.php
141 141
				</td>
142 142
				<?php if($admin->get_permission('pages_modify') == true AND $can_modify == true AND $page['visibility'] != 'heading') { ?>
143 143
				<td>
144
					<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page['page_id']; ?>" title="<?php echo $TEXT['MODIFY']; ?>"><?php echo ($page['page_title']); ?></a>
144
					<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page['page_id']; ?>" title="<?php echo $TEXT['MODIFY']; ?>"><?php echo (htmlentities($page['page_title'])); ?></a>
145 145
				</td>
146 146
				<?php } else { ?>
147 147
				<td>
148 148
					<?php
149 149
					if($page['visibility'] != 'heading') {
150
						echo ($page['page_title']);
150
						echo (htmlentities($page['page_title']));
151 151
					} else {
152
						echo '<b>'.($page['page_title']).'</b>';
152
						echo '<b>'.(htmlentities($page['page_title'])).'</b>';
153 153
					}
154 154
					?>
155 155
				</td>
156 156
				<?php } ?>
157 157
				<td align="left" width="232">
158
					<font color="#999999"><?php echo $page['menu_title']; ?></font>
158
					<font color="#999999"><?php echo htmlentities($page['menu_title']); ?></font>
159 159
				</td>
160 160
				<td align="right" valign="middle" width="30" style="padding-right: 20px;">
161 161
				<?php if($page['visibility'] == 'public') { ?>

Also available in: Unified diff