htmlentities -> htmlspecialchars

This commit is contained in:
2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions

View File

@@ -119,12 +119,12 @@
$rank ++;
$view_rank[$i][0]= $rank;
$view_rank[$i][1]= "<a href='userinfo.php?user=" .htmlentities ( $row['user_id'],ENT_QUOTES,"UTF-8") . "'>" . $row['user_id'] . "</a>";
$view_rank[$i][1]= "<a href='userinfo.php?user=" .htmlspecialchars ( $row['user_id'],ENT_QUOTES,"UTF-8") . "'>" . $row['user_id'] . "</a>";
if(isset($row['starred']) && $row['starred'] >0 ) $view_rank[$i][1]="".$view_rank[$i][1].""; //github starred rewarding
$view_rank[$i][2]= "<div class=center>" . htmlentities ( $row['nick'] ,ENT_QUOTES,"UTF-8") ."</div>";
$view_rank[$i][3]= "<div class=center>" . htmlentities ( $row['group_name'] ,ENT_QUOTES,"UTF-8") ."</div>";
$view_rank[$i][4]= "<div class=center><a href='status.php?user_id=" .htmlentities ( $row['user_id'],ENT_QUOTES,"UTF-8") ."&jresult=4'>" . $row['solved']."</a>"."</div>";
$view_rank[$i][5]= "<div class=center><a href='status.php?user_id=" . htmlentities ($row['user_id'],ENT_QUOTES,"UTF-8") ."'>" . $row['submit'] . "</a>"."</div>";
$view_rank[$i][2]= "<div class=center>" . htmlspecialchars ( $row['nick'] ,ENT_QUOTES,"UTF-8") ."</div>";
$view_rank[$i][3]= "<div class=center>" . htmlspecialchars ( $row['group_name'] ,ENT_QUOTES,"UTF-8") ."</div>";
$view_rank[$i][4]= "<div class=center><a href='status.php?user_id=" .htmlspecialchars ( $row['user_id'],ENT_QUOTES,"UTF-8") ."&jresult=4'>" . $row['solved']."</a>"."</div>";
$view_rank[$i][5]= "<div class=center><a href='status.php?user_id=" . htmlspecialchars ($row['user_id'],ENT_QUOTES,"UTF-8") ."'>" . $row['submit'] . "</a>"."</div>";
if ($row['submit'] == 0)
$view_rank[$i][6]= "0.00%";