summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLoui Chang <louipc.ist@gmail.com>2009-10-26 12:54:31 -0400
committerLoui Chang <louipc.ist@gmail.com>2009-10-26 12:54:31 -0400
commitd29a7a5a6739198a080007aad0506f831b736fe1 (patch)
treeeb091cfa75271c3e0a66657cbbef97764dc466c3
parent075ca25f02175c2cb629628821e8e150c383f569 (diff)
downloadaurweb-d29a7a5a6739198a080007aad0506f831b736fe1.tar.xz
pkg_search_results: Translate special characters to html entities.
Reported-by: Cedric Staniewski <cedric@gmx.ca> Signed-off-by: Loui Chang <louipc.ist@gmail.com>
-rw-r--r--web/template/pkg_search_results.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/web/template/pkg_search_results.php b/web/template/pkg_search_results.php
index bdb5f6c..b4415d7 100644
--- a/web/template/pkg_search_results.php
+++ b/web/template/pkg_search_results.php
@@ -67,7 +67,7 @@ for ($i = 0; $row = mysql_fetch_assoc($result); $i++) {
<?php endif; ?>
<?php endif; ?>
<td class='<?php print $c ?>'><span class='f4'><span class='blue'>
- <?php print $row["Description"] ?></span></span></td>
+ <?php print htmlspecialchars($row['Description'], ENT_QUOTES); ?></span></span></td>
<td class='<?php print $c ?>'><span class='f5'><span class='blue'>
<?php if (isset($row["Maintainer"])): ?>
<a href='packages.php?K=<?php print $row['Maintainer'] ?>&amp;SeB=m'><?php print $row['Maintainer'] ?></a>