Closes #651: I agree, changed to convert both quotes.

git-svn-id: https://code.elgg.org/elgg/trunk@2979 36083f99-b078-4883-b0ff-0f9b5a30f544

8 files changed, 8 insertions, 8 deletions

diff --git a/views/default/output/calendar.php b/views/default/output/calendar.php
index e31290e6a..d08c05cef 100644
--- a/views/default/output/calendar.php
+++ b/views/default/output/calendar.php
@@ -18,7 +18,7 @@
     if (is_int($vars['value'])) {
         echo date("F j, Y", $vars['value']);
     } else {
-        echo htmlentities($vars['value'], null, 'UTF-8');
+        echo htmlentities($vars['value'], ENT_QUOTES, 'UTF-8');
     }
 
 ?>
\ No newline at end of file
diff --git a/views/default/output/confirmlink.php b/views/default/output/confirmlink.php
index 2ef3ad14b..a51e58af9 100644
--- a/views/default/output/confirmlink.php
+++ b/views/default/output/confirmlink.php
@@ -21,4 +21,4 @@
 	if (!$confirm)

 		$confirm = elgg_echo('question:areyousure');

 ?>

-<a href="<?php echo $vars['href']; ?>" onclick="return confirm('<?php echo addslashes($confirm); ?>');"><?php echo htmlentities($vars['text'], null, 'UTF-8'); ?></a>
\ No newline at end of file
+<a href="<?php echo $vars['href']; ?>" onclick="return confirm('<?php echo addslashes($confirm); ?>');"><?php echo htmlentities($vars['text'], ENT_QUOTES, 'UTF-8'); ?></a>
\ No newline at end of file
diff --git a/views/default/output/email.php b/views/default/output/email.php
index e6b406507..cad9a9348 100644
--- a/views/default/output/email.php
+++ b/views/default/output/email.php
@@ -16,6 +16,6 @@
 	 */

 

     if (!empty($vars['value'])) {

-    	echo "<a href=\"mailto:" . $vars['value'] . "\">". htmlentities($vars['value'], null, 'UTF-8') ."</a>";

+    	echo "<a href=\"mailto:" . $vars['value'] . "\">". htmlentities($vars['value'], ENT_QUOTES, 'UTF-8') ."</a>";

     }

 ?>
\ No newline at end of file
diff --git a/views/default/output/pulldown.php b/views/default/output/pulldown.php
index 8b1173842..1045d19be 100644
--- a/views/default/output/pulldown.php
+++ b/views/default/output/pulldown.php
@@ -15,5 +15,5 @@
 	 * 

 	 */

 

-    echo htmlentities($vars['value'], null, 'UTF-8'); //$vars['value'];

+    echo htmlentities($vars['value'], ENT_QUOTES, 'UTF-8'); //$vars['value'];

 ?>
\ No newline at end of file
diff --git a/views/default/output/tagcloud.php b/views/default/output/tagcloud.php
index 43f7b80b0..463b25116 100644
--- a/views/default/output/tagcloud.php
+++ b/views/default/output/tagcloud.php
@@ -43,7 +43,7 @@
             if (!empty($cloud)) $cloud .= ", ";

             $size = round((log($tag->total) / log($max)) * 100) + 30;

             if ($size < 60) $size = 60;

-            $cloud .= "<a href=\"" . $vars['url'] . "search/?tag=". urlencode($tag->tag) . $object . $subtype . "\" style=\"font-size: {$size}%\" title=\"".addslashes($tag->tag)." ({$tag->total})\" style=\"text-decoration:none;\">" . htmlentities($tag->tag, null, 'UTF-8') . "</a>";

+            $cloud .= "<a href=\"" . $vars['url'] . "search/?tag=". urlencode($tag->tag) . $object . $subtype . "\" style=\"font-size: {$size}%\" title=\"".addslashes($tag->tag)." ({$tag->total})\" style=\"text-decoration:none;\">" . htmlentities($tag->tag, ENT_QUOTES, 'UTF-8') . "</a>";

         }

         echo $cloud;

 

diff --git a/views/default/output/tags.php b/views/default/output/tags.php
index d3d9522bc..d437475f6 100644
--- a/views/default/output/tags.php
+++ b/views/default/output/tags.php
@@ -46,7 +46,7 @@
                $type = "";

            }

            if (is_string($tag)) { 

-               $tagstr .= "<a rel=\"tag\" href=\"{$vars['url']}tag/".urlencode($tag) . "{$type}{$subtype}{$object}\">" . htmlentities($tag, null, 'UTF-8') . "</a>";

+               $tagstr .= "<a rel=\"tag\" href=\"{$vars['url']}tag/".urlencode($tag) . "{$type}{$subtype}{$object}\">" . htmlentities($tag, ENT_QUOTES, 'UTF-8') . "</a>";

            }

         }

          echo $tagstr;

diff --git a/views/default/output/text.php b/views/default/output/text.php
index db7a5ea90..f2911f26d 100644
--- a/views/default/output/text.php
+++ b/views/default/output/text.php
@@ -15,5 +15,5 @@
 	 * 

 	 */

 

-    echo htmlentities($vars['value'], null, 'UTF-8'); // $vars['value'];

+    echo htmlentities($vars['value'], ENT_QUOTES, 'UTF-8'); // $vars['value'];

 ?>
\ No newline at end of file
diff --git a/views/default/output/url.php b/views/default/output/url.php
index af4582fba..07b5622bf 100644
--- a/views/default/output/url.php
+++ b/views/default/output/url.php
@@ -20,7 +20,7 @@
 	    if ((substr_count($val, "http://") == 0) && (substr_count($val, "https://") == 0)) {

 	        $val = "http://" . $val;

 	    }

-	    echo "<a href=\"{$val}\" target=\"_blank\">". htmlentities($val, null, 'UTF-8'). "</a>";

+	    echo "<a href=\"{$val}\" target=\"_blank\">". htmlentities($val, ENT_QUOTES, 'UTF-8'). "</a>";

     }

 

 ?>
\ No newline at end of file