Fixed issue #8644: Incomplete display of adv. attributes containing s…

…ingle quotes Dev: single quote ended string in "input" Dev: no problem with "textarea"
LimeSurvey · Feb 2, 2014 · 771deaa · 771deaa
1 parent 2469ac6
commit 771deaa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/views/admin/survey/Question/advanced_settings_view.php b/application/views/admin/survey/Question/advanced_settings_view.php
@@ -39,7 +39,7 @@
                                 }
                                 echo "</select>";
                                 break;
-                            case 'text':?> <input type='text' id='<?php echo $aAttribute['name'];?>' name='<?php echo $aAttribute['name'];?>' value='<?php echo $aAttribute['value'];?>' />
+                            case 'text':?> <input type='text' id='<?php echo $aAttribute['name'];?>' name='<?php echo $aAttribute['name'];?>' value='<?php echo htmlspecialchars($aAttribute['value'],ENT_QUOTES, 'UTF-8');?>' />
                             <?php
                                 break;
                             case 'integer':?> <input type='text' id='<?php echo $aAttribute['name'];?>' name='<?php echo $aAttribute['name'];?>' value='<?php echo $aAttribute['value'];?>' />