htmlentities -> htmlspecialchars

This commit is contained in:
2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions

View File

@@ -29,10 +29,10 @@
$to_user="";
$title="";
if (isset($_GET['to_user'])){
$to_user=htmlentities($_GET['to_user'],ENT_QUOTES,"UTF-8");
$to_user=htmlspecialchars($_GET['to_user'],ENT_QUOTES,"UTF-8");
}
if (isset($_GET['title'])){
$title=htmlentities($_GET['title'],ENT_QUOTES,"UTF-8");
$title=htmlspecialchars($_GET['title'],ENT_QUOTES,"UTF-8");
}
if (!isset($_SESSION[$OJ_NAME.'_'.'user_id'])){