klarkxy/hustoj
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

htmlentities -> htmlspecialchars

Browse Source
This commit is contained in:
klarkxy
2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
web/superthread.php
View File

@@ -25,7 +25,7 @@
<td style="text-align:left">
<a href="discuss.php<?php if ($row['pid']!=0 && $row['cid']!=null) echo "?pid=".$row['pid']."&cid=".$row['cid'];
else if ($row['pid']!=0) echo"?pid=".$row['pid']; else if ($row['cid']!=null) echo"?cid=".$row['cid'];?>">
<?php if ($row['pid']!=0) echo "Problem ".$row['pid']; else echo "MainBoard";?></a> >> <?php echo nl2br(htmlentities($row['title'] ,ENT_QUOTES,"UTF-8"));?></td>
<?php if ($row['pid']!=0) echo "Problem ".$row['pid']; else echo "MainBoard";?></a> >> <?php echo nl2br(htmlspecialchars($row['title'] ,ENT_QUOTES,"UTF-8"));?></td>
</tr>
<?php
@@ -62,10 +62,10 @@
<?php echo $i+1;?>#</span>
</div>
<div style="text-align:left; clear:both; margin:10px 30px">
<?php if ($row['status'] == 0) echo nl2br(htmlentities($row['content'],ENT_QUOTES,"UTF-8"));
<?php if ($row['status'] == 0) echo nl2br(htmlspecialchars($row['content'],ENT_QUOTES,"UTF-8"));
else {
if (!$isuser || $isadmin)echo "<div style=\"border-left:10px solid gray\"><font color=red><i>Notice : <br>This reply is blocked by administrator.</i></font></div>";
if ($isuser || $isadmin) echo nl2br(htmlentities($row['content'],ENT_QUOTES,"UTF-8"));
if ($isuser || $isadmin) echo nl2br(htmlspecialchars($row['content'],ENT_QUOTES,"UTF-8"));
}
?>
</div>