htmlentities -> htmlspecialchars

This commit is contained in:
2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions

View File

@@ -181,9 +181,9 @@ echo "<title>$MSG_BBS</title>";
echo "</td>";
if($row['cid'])
echo "<td align='left'><a href=\"thread.php?tid={$row['tid']}&cid={$row['cid']}\">".htmlentities($row['title'],ENT_QUOTES,"UTF-8")."</a></td>";
echo "<td align='left'><a href=\"thread.php?tid={$row['tid']}&cid={$row['cid']}\">".htmlspecialchars($row['title'],ENT_QUOTES,"UTF-8")."</a></td>";
else
echo "<td align='left'><a href=\"thread.php?tid={$row['tid']}\">".htmlentities($row['title'],ENT_QUOTES,"UTF-8")."</a></td>";
echo "<td align='left'><a href=\"thread.php?tid={$row['tid']}\">".htmlspecialchars($row['title'],ENT_QUOTES,"UTF-8")."</a></td>";
$timestamp = strtotime($row['lastupdate']);