htmlentities -> htmlspecialchars

This commit is contained in:
2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions

View File

@@ -29,7 +29,7 @@ if (isset($_GET['pid'])){
if ($result){
$row=$result[0];
echo "<a href='userinfo.php?user=".htmlentities($row['user_id'],ENT_QUOTES,'utf-8')."'>".htmlentities($row['user_id'],ENT_QUOTES,'utf-8')."</a>";
echo "<a href='userinfo.php?user=".htmlspecialchars($row['user_id'],ENT_QUOTES,'utf-8')."'>".htmlspecialchars($row['user_id'],ENT_QUOTES,'utf-8')."</a>";
}else{
echo "$MSG_IMPORTED";
}