Revision 396
Added by Matthias almost 18 years ago
frontend.functions.php | ||
---|---|---|
197 | 197 |
$query_menu=$database->query("SELECT menu_title,link FROM ".TABLE_PREFIX."pages WHERE page_id=$temp"); |
198 | 198 |
$page=$query_menu->fetchRow(); |
199 | 199 |
if ($links==true AND $temp!=$page_id) |
200 |
echo '<a href="'.page_link($page['link']).'">'.$page['menu_title'].'</a>';
|
|
200 |
echo '<a href="'.page_link($page['link']).'">'.htmlentities($page['menu_title']).'</a>';
|
|
201 | 201 |
else |
202 |
echo $page['menu_title'];
|
|
202 |
echo htmlentities($page['menu_title']);
|
|
203 | 203 |
} |
204 | 204 |
$counter++; |
205 | 205 |
} |
Also available in: Unified diff
Fixed problem with Page Title has to be escaped (#287)