From 3e3b23c01a4a53df15596b25476d9d005ac32ebe Mon Sep 17 00:00:00 2001 From: garvinhicking <garvinhicking> Date: Tue, 26 Jul 2005 19:31:15 +0000 Subject: [PATCH] Backport: Show category description on mouse over --- docs/NEWS | 3 +++ include/plugin_internal.inc.php | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/docs/NEWS b/docs/NEWS index 521e991..94919fa 100644 --- a/docs/NEWS +++ b/docs/NEWS @@ -14,6 +14,9 @@ Version 0.8.3 () XML_RPC to 1.3.3 Fixing several bugs and vulnerabilities. (nohn) + * Make categories sidebar plugin show categories' description, not the + name on mouse over (garvinhicking) + * Fix possible exploit that sends comments to the blog owner and others with arbitrary mailheaders and a link to invalid entries. Thanks to Sebastian Raible! (garvinhicking) diff --git a/include/plugin_internal.inc.php b/include/plugin_internal.inc.php index 2c4ca7c..afd2f50 100644 --- a/include/plugin_internal.inc.php +++ b/include/plugin_internal.inc.php @@ -991,7 +991,7 @@ class serendipity_categories_plugin extends serendipity_plugin { if ( !empty($image) ) { $html .= '<a href="'. serendipity_rewriteURL(PATH_FEEDS .'/'. PATH_CATEGORIES .'/'. serendipity_makePermalink(PERM_FEEDS_CATEGORIES, array('id' => $cat['categoryid'], 'title' => $cat['category_name']))) .'"><img src="'. $image .'" alt="XML" style="border: 0px" /></a> '; } - $html .= '<a href="'. serendipity_rewriteURL(PATH_CATEGORIES . '/' . serendipity_makePermalink(PERM_CATEGORIES, array('id' => $cat['categoryid'], 'title' => $cat['category_name'])), 'serendipityHTTPPath') .'" title="'. $cat['category_name'] .'" style="padding-left: '. $cat['depth']*6 .'px">'. $cat['category_name'] .'</a>'; + $html .= '<a href="'. serendipity_rewriteURL(PATH_CATEGORIES . '/' . serendipity_makePermalink(PERM_CATEGORIES, array('id' => $cat['categoryid'], 'title' => $cat['category_name'])), 'serendipityHTTPPath') .'" title="'. htmlspecialchars($cat['category_description']) .'" style="padding-left: '. $cat['depth']*6 .'px">'. htmlspecialchars($cat['category_name']) .'</a>'; $html .= '</div>' . "\n"; } } -- 2.39.5