htmlentities -> htmlspecialchars
This commit is contained in:
@@ -56,7 +56,7 @@ if(isset($_POST['news_id'])){
|
||||
|
||||
$row = $result[0];
|
||||
|
||||
$title = htmlentities($row['title'],ENT_QUOTES,"UTF-8");
|
||||
$title = htmlspecialchars($row['title'],ENT_QUOTES,"UTF-8");
|
||||
$content = $row['content'];
|
||||
}
|
||||
?>
|
||||
@@ -68,7 +68,7 @@ if(isset($_POST['news_id'])){
|
||||
</p>
|
||||
<p align=left>
|
||||
<textarea class=kindeditor name=content>
|
||||
<?php echo htmlentities($content,ENT_QUOTES,"UTF-8")?>
|
||||
<?php echo htmlspecialchars($content,ENT_QUOTES,"UTF-8")?>
|
||||
</textarea>
|
||||
</p>
|
||||
<?php require_once("../include/set_post_key.php");?>
|
||||
|
||||
Reference in New Issue
Block a user