From: garvinhicking <garvinhicking>
Date: Thu, 30 Mar 2006 10:37:48 +0000 (+0000)
Subject: use htmlspecialchars()
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=6659739f7473c98aa621a9c6f59fddfa145ddb07;p=s9y.git

use htmlspecialchars()
---

diff --git a/include/admin/entries.inc.php b/include/admin/entries.inc.php
index 88171a0..5638214 100644
--- a/include/admin/entries.inc.php
+++ b/include/admin/entries.inc.php
@@ -231,7 +231,7 @@ function serendipity_drawList() {
                 <table width="100%" cellspacing="0" cellpadding="3">
                     <tr>
                         <td>
-                            <strong><?php echo $entry_pre; ?><a href="?serendipity[action]=admin&amp;serendipity[adminModule]=entries&amp;serendipity[adminAction]=edit&amp;serendipity[id]=<?php echo $entry['id']; ?>" title="#<?php echo $entry['id']; ?>"><?php echo serendipity_truncateString($entry['title'],50) ?></a></strong>
+                            <strong><?php echo $entry_pre; ?><a href="?serendipity[action]=admin&amp;serendipity[adminModule]=entries&amp;serendipity[adminAction]=edit&amp;serendipity[id]=<?php echo $entry['id']; ?>" title="#<?php echo $entry['id']; ?>"><?php echo serendipity_truncateString(htmlspecialchars($entry['title']),50) ?></a></strong>
                         </td>
                         <td align="right">
                             <?php echo serendipity_formatTime(DATE_FORMAT_SHORT, $entry['timestamp']) . ' ' .$lm; ?>