Fixed bug #703, labels can now contain html code with single or doubl…

…e quotes to link images

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/source/phpsurveyor@2565 b72ed6b6-b9f8-46b5-92b4-906544132732

admin/labels.php

@@ -322,7 +322,7 @@
 
     			$labelsoutput.= "\t</td>\n"
     			."\t<td width='35%'>\n"
-    			."\t<input type='text' name='title_{$row['language']}_{$row['sortorder']}' maxlength='100' size='80' value=\"{$row['title']}\" />\n"
+    			."\t<input type='text' name='title_{$row['language']}_{$row['sortorder']}' maxlength='100' size='80' value=\"".html_escape($row['title'])."\" />\n"
     			."\t</td>\n"
     			."\t<td width='25%'>\n";
     			if ($activeuse == 0)

qanda.php

@@ -2437,7 +2437,7 @@ function do_array_flexible($ia)
 			{
 				$answer .= "\t\t\t\t\t<td align='center' width='$cellwidth%'><label for='answer$myfname-$ld'>";
 				$answer .= "<input class='radio' type='radio' name='$myfname' value='$ld' id='answer$myfname-$ld' title='"
-				. $labelans[$thiskey]."'";
+				. html_escape($labelans[$thiskey])."'";
 				if (isset($_SESSION[$myfname]) && $_SESSION[$myfname] == $ld) {$answer .= " checked";}
 				// --> START NEW FEATURE - SAVE
 				$answer .= " onClick='checkconditions(this.value, this.name, this.type)' onChange='modfield(this.name)' /></label></td>\n";
@@ -2538,7 +2538,7 @@ function do_array_flexiblecolumns($ia)
 			$answer .= "\t\t\t\t\t<td align='center' class='$trbc' width='$cellwidth%'>"
 			. "<label for='answer$myfname-".$ansrow['code']."'>";
 			$answer .= "<input class='radio' type='radio' name='$myfname' value='".$ansrow['code']."' id='answer$myfname-".$ansrow['code']."'"
-			. " title='".$ansrow['answer']."'";
+			. " title='".html_escape($ansrow['answer'])."'";
 			if (isset($_SESSION[$myfname]) && $_SESSION[$myfname] == $ansrow['code']) {$answer .= " checked";}
 			// --> START NEW FEATURE - SAVE
 			$answer .= " onClick='checkconditions(this.value, this.name, this.type)' onChange='modfield(this.name)' /></label></td>\n";