klarkxy/hustoj
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

htmlentities -> htmlspecialchars

Browse Source
This commit is contained in:
klarkxy
2024-12-06 15:35:38 +08:00
parent daa005f029
commit d9b2d13caa
184 changed files with 410 additions and 405 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
web/template/mdui/ranklist.php
View File

@@ -13,7 +13,7 @@
<form action="ranklist.php">
<div class="mdui-textfield" align="center" style="width: 100%">
<input class="mdui-textfield-input" type="text" name="prefix" placeholder="用户"
value="<?php echo htmlentities($_GET["prefix"], ENT_QUOTES, "UTF-8")?>"
value="<?php echo htmlspecialchars($_GET["prefix"], ENT_QUOTES, "UTF-8")?>"
style="width: calc(50% - 40px); display: inline-block;">
<button class="mdui-btn mdui-btn-icon" type="sumbit">
<i class="mdui-icon material-icons" style="top: 35%; left: 40%;">search</i>
@@ -66,10 +66,10 @@
$qs="";
$nstart=isset($_GET["start"])?intval($_GET["start"]):0;
if(isset($_GET['prefix'])){
$qs.="&prefix=".htmlentities($_GET['prefix'],ENT_QUOTES,"utf-8");
$qs.="&prefix=".htmlspecialchars($_GET['prefix'],ENT_QUOTES,"utf-8");
}
if(isset($scope)){
$qs.="&scope=".htmlentities($scope,ENT_QUOTES,"utf-8");
$qs.="&scope=".htmlspecialchars($scope,ENT_QUOTES,"utf-8");
}
for($i = 0; $i <$view_total ; $i += $page_size) {
echo '<a class="mdui-btn'.($i == $nstart?" mdui-btn-active":"").'" href="./ranklist.php?start='.strval ( $i ).$qs. '">'