html escape config values before putting them in text boxes
git-svn-id: file:///home/shish/svn/shimmie2/trunk@1013 7f39781d-f577-437e-ae19-be835c7a54ca
This commit is contained in:
parent
af3cbba180
commit
1f0e363645
@ -46,7 +46,7 @@ class SetupBlock extends Block {
|
||||
|
||||
public function add_text_option($name, $label=null) {
|
||||
global $config;
|
||||
$val = $config->get_string($name);
|
||||
$val = html_escape($config->get_string($name));
|
||||
if(!is_null($label)) {
|
||||
$this->body .= "<label for='$name'>$label</label>";
|
||||
}
|
||||
@ -56,7 +56,7 @@ class SetupBlock extends Block {
|
||||
|
||||
public function add_longtext_option($name, $label=null) {
|
||||
global $config;
|
||||
$val = $config->get_string($name);
|
||||
$val = html_escape($config->get_string($name));
|
||||
if(!is_null($label)) {
|
||||
$this->body .= "<label for='$name'>$label</label>";
|
||||
}
|
||||
@ -83,7 +83,7 @@ class SetupBlock extends Block {
|
||||
|
||||
public function add_int_option($name, $label=null) {
|
||||
global $config;
|
||||
$val = $config->get_string($name);
|
||||
$val = html_escape($config->get_string($name));
|
||||
if(!is_null($label)) {
|
||||
$this->body .= "<label for='$name'>$label</label>";
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user