MDL-7861 fixed regression caused by one of previous commit related to print_single_bu...

diff --git a/lib/weblib.php b/lib/weblib.php
index faa99560227c4895e5394e0c3d4593817d7a88f9..3452b3cc9bbe547155db61eba8bff04ac996e318 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -2901,9 +2901,10 @@ function print_box_end($return=false) {
  */
 function print_single_button($link, $options, $label='OK', $method='get', $target='_self', $return=false) {
     $output = '';
+    $link = str_replace('"', '"', $link); //basic XSS protection
     $output .= '<div class="singlebutton">';
     // taking target out, will need to add later target="'.$target.'"
-    $output .= '<form action="'. s($link) .'" method="'. $method .'">';   
+    $output .= '<form action="'. $link .'" method="'. $method .'">';   
     $output .= '<fieldset class="invisiblefieldset">';
     if ($options) {
         foreach ($options as $name => $value) {