htmlentities -> htmlspecialchars
This commit is contained in:
@@ -29,10 +29,10 @@
|
||||
$to_user="";
|
||||
$title="";
|
||||
if (isset($_GET['to_user'])){
|
||||
$to_user=htmlentities($_GET['to_user'],ENT_QUOTES,"UTF-8");
|
||||
$to_user=htmlspecialchars($_GET['to_user'],ENT_QUOTES,"UTF-8");
|
||||
}
|
||||
if (isset($_GET['title'])){
|
||||
$title=htmlentities($_GET['title'],ENT_QUOTES,"UTF-8");
|
||||
$title=htmlspecialchars($_GET['title'],ENT_QUOTES,"UTF-8");
|
||||
}
|
||||
|
||||
if (!isset($_SESSION[$OJ_NAME.'_'.'user_id'])){
|
||||
|
||||
Reference in New Issue
Block a user