html escape config values before putting them in text boxes

git-svn-id: file:///home/shish/svn/shimmie2/trunk@1013 7f39781d-f577-437e-ae19-be835c7a54ca
This commit is contained in:
shish 2008-09-01 13:22:14 +00:00
parent af3cbba180
commit 1f0e363645

View File

@ -46,7 +46,7 @@ class SetupBlock extends Block {
public function add_text_option($name, $label=null) {
global $config;
$val = $config->get_string($name);
$val = html_escape($config->get_string($name));
if(!is_null($label)) {
$this->body .= "<label for='$name'>$label</label>";
}
@ -56,7 +56,7 @@ class SetupBlock extends Block {
public function add_longtext_option($name, $label=null) {
global $config;
$val = $config->get_string($name);
$val = html_escape($config->get_string($name));
if(!is_null($label)) {
$this->body .= "<label for='$name'>$label</label>";
}
@ -83,7 +83,7 @@ class SetupBlock extends Block {
public function add_int_option($name, $label=null) {
global $config;
$val = $config->get_string($name);
$val = html_escape($config->get_string($name));
if(!is_null($label)) {
$this->body .= "<label for='$name'>$label</label>";
}