diff options
| author | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2009-02-10 14:32:34 +0000 |
|---|---|---|
| committer | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2009-02-10 14:32:34 +0000 |
| commit | 7c884b14bd0d1a9d7bebe314e27ebd74ec0726ee (patch) | |
| tree | cd8dbe67446cfa1988714782da642be60155e9a1 /views/default/input/pulldown.php | |
| parent | 65001decf7a36cffd077575229b4dd9239a48315 (diff) | |
| download | elgg-7c884b14bd0d1a9d7bebe314e27ebd74ec0726ee.tar.gz elgg-7c884b14bd0d1a9d7bebe314e27ebd74ec0726ee.tar.bz2 | |
Refs #756: htmlentities on all input views
git-svn-id: https://code.elgg.org/elgg/trunk@2704 36083f99-b078-4883-b0ff-0f9b5a30f544
Diffstat (limited to 'views/default/input/pulldown.php')
| -rw-r--r-- | views/default/input/pulldown.php | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/views/default/input/pulldown.php b/views/default/input/pulldown.php index fcd13a6b3..8d7d94e75 100644 --- a/views/default/input/pulldown.php +++ b/views/default/input/pulldown.php @@ -32,9 +32,9 @@ { foreach($vars['options_values'] as $value => $option) { if ($value != $vars['value']) { - echo "<option value=\"$value\">{$option}</option>"; + echo "<option value=\"$value\">". htmlentities($option, null, 'UTF-8') ."</option>"; } else { - echo "<option value=\"$value\" selected=\"selected\">{$option}</option>"; + echo "<option value=\"$value\" selected=\"selected\">". htmlentities($option, null, 'UTF-8') ."</option>"; } } } @@ -42,9 +42,9 @@ {
foreach($vars['options'] as $option) {
if ($option != $vars['value']) {
- echo "<option>{$option}</option>";
+ echo "<option>". htmlentities($option, null, 'UTF-8') ."</option>";
} else {
- echo "<option selected=\"selected\">{$option}</option>";
+ echo "<option selected=\"selected\">". htmlentities($option, null, 'UTF-8') ."</option>";
}
}
}
|