From: skodak <skodak>
Date: Wed, 18 Jul 2007 18:42:45 +0000 (+0000)
Subject: MDL-10517 Use of addslashes in assignment/lib.php
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=3a935caf4db90de3f8ac9636d46b6dbaadf1c329;p=moodle.git

MDL-10517 Use of addslashes in assignment/lib.php
---

diff --git a/mod/assignment/lib.php b/mod/assignment/lib.php
index 318df34975..3db1c83814 100644
--- a/mod/assignment/lib.php
+++ b/mod/assignment/lib.php
@@ -670,7 +670,7 @@ class assignment_base {
         if (empty($SESSION->flextable['mod-assignment-submissions']->collapse['timemodified']) &&
             $submission->timemodified) {
             $output.= 'opener.document.getElementById("ts'.$submission->userid.
-                 '").innerHTML="'.addslashes($this->print_student_answer($submission->userid)).userdate($submission->timemodified)."\";\n";
+                 '").innerHTML="'.addslashes_js($this->print_student_answer($submission->userid)).userdate($submission->timemodified)."\";\n";
         }
 
         if (empty($SESSION->flextable['mod-assignment-submissions']->collapse['timemarked']) &&
@@ -684,7 +684,7 @@ class assignment_base {
             $buttontext = get_string('update');
             $button = link_to_popup_window ('/mod/assignment/submissions.php?id='.$this->cm->id.'&amp;userid='.$submission->userid.'&amp;mode=single'.'&amp;offset='.(optional_param('offset', '', PARAM_INT)-1),
                       'grade'.$submission->userid, $buttontext, 450, 700, $buttontext, 'none', true, 'button'.$submission->userid);
-            $output.= 'opener.document.getElementById("up'.$submission->userid.'").innerHTML="'.addslashes($button).'";';
+            $output.= 'opener.document.getElementById("up'.$submission->userid.'").innerHTML="'.addslashes_js($button).'";';
         }
         $output .= "\n-->\n</script>";
         return $output;