htmlentities -> htmlspecialchars

2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions
--- a/web/include/bbcode.php
+++ b/web/include/bbcode.php
@@ -307,8 +307,8 @@ class BBCode
              $url = $buffer;
 	    }
 	    if(!isset($colorIndex)) $colorIndex =0;
-	    $plist=html_entity_decode($url);
-	    $pnum= count(explode(",",html_entity_decode($url)));
+	    $plist=htmlspecialchars_decode($url);
+	    $pnum= count(explode(",",htmlspecialchars_decode($url)));
 	    //var_dump($colorIndex);
            // emit the tag 如果希望题单显示2列，修改下面的col-lg-12为col-lg-6
 	    $output = $output . '<div class="col-xs-12 col-lg-12"><div class="panel '.$plist_color[$colorIndex%count($plist_color)].'">'