From 5efa9426d40326b8d31c152dd2a433076b490308 Mon Sep 17 00:00:00 2001 From: Steve Clay Date: Sun, 9 Sep 2012 01:52:09 -0400 Subject: Fixes #4593: All titles are HTML-escaped plain text --- mod/groups/actions/groups/edit.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'mod/groups/actions/groups/edit.php') diff --git a/mod/groups/actions/groups/edit.php b/mod/groups/actions/groups/edit.php index df2464a65..a4169461a 100644 --- a/mod/groups/actions/groups/edit.php +++ b/mod/groups/actions/groups/edit.php @@ -33,8 +33,7 @@ foreach ($CONFIG->group as $shortname => $valuetype) { } } -$input['name'] = get_input('name'); -$input['name'] = html_entity_decode($input['name'], ENT_COMPAT, 'UTF-8'); +$input['name'] = htmlspecialchars(get_input('name', '', false), ENT_QUOTES, 'UTF-8'); $user = elgg_get_logged_in_user_entity(); -- cgit v1.2.3