addslashes to string used for javascript link

diff --git a/lib/weblib.php b/lib/weblib.php
index e3188b011b99d566d143e1cdd1fc37cc481c5061..daa467a038c89648908d1993137e074e11bdcf08 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -245,7 +245,7 @@ function link_to_popup_window ($url, $name="popup", $linkname="click here", $hei
 
     echo "\n<SCRIPT language=\"Javascript\">";
     echo "\n<!--";
-    echo "\ndocument.write('<A TITLE=\"$title\" HREF=javascript:openpopup(\"$url\",\"$name\",\"$height\",\"$width\") >$linkname</A>');";
+    echo "\ndocument.write('<A TITLE=\"$title\" HREF=javascript:openpopup(\"$url\",\"$name\",\"$height\",\"$width\") >".addslashes($linkname)."</A>');";
     echo "\n//-->";
     echo "\n</SCRIPT>";
     echo "\n<NOSCRIPT>\n<A TARGET=\"$name\" TITLE=\"$title\" HREF=\"$CFG->wwwroot/$url\">$linkname</A>\n</NOSCRIPT>\n";