From: dongsheng <dongsheng>
Date: Wed, 9 Apr 2008 06:08:23 +0000 (+0000)
Subject: MDL-14137, replace htmlentities with htmlspecialchars, merged from MOODLE_19_STABLE
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=5bf26508711e916cef5c0b0b58bb7c3ccc29333c;p=moodle.git

MDL-14137, replace htmlentities with htmlspecialchars, merged from MOODLE_19_STABLE
---

diff --git a/mod/data/lib.php b/mod/data/lib.php
index 53ba329336..750b423435 100755
--- a/mod/data/lib.php
+++ b/mod/data/lib.php
@@ -1812,7 +1812,7 @@ function data_presets_export($course, $cm, $data) {
 
     $presetxml .= "<settings>\n";
     foreach ($settingssaved as $setting) {
-        $presetxml .= "<$setting>".htmlentities($data->$setting)."</$setting>\n";
+        $presetxml .= "<$setting>".htmlspecialchars($data->$setting, ENT_QUOTES)."</$setting>\n";
     }
     $presetxml .= "</settings>\n\n";
 
@@ -1822,7 +1822,7 @@ function data_presets_export($course, $cm, $data) {
             $presetxml .= "<field>\n";
             foreach ($field as $key => $value) {
                 if ($value != '' && $key != 'id' && $key != 'dataid') {
-                    $presetxml .= "<$key>".htmlentities($value)."</$key>\n";
+                    $presetxml .= "<$key>".htmlspecialchars($value, ENT_QUOTES)."</$key>\n";
                 }
             }
             $presetxml .= "</field>\n\n";