Changeset 165Tweet

Timestamp:

12/01/05 16:19:48 (7 years ago)

Author:

sam

Message:

• escape & < > in HTML.

File:

• trollforge/lastmeasure/stats/index.php (modified) (1 diff)

trollforge/lastmeasure/stats/index.php

@@ -15 +15 @@
         $str = "$s1...$s2";
     }
-    return str_replace(" ", " ", $str);
+    $str = str_replace("&", "&", $str);
+    $str = str_replace(" ", " ", $str);
+    $str = str_replace("<", "&lt;", $str);
+    $str = str_replace(">", "&gt;", $str);
+    return $str;
 }