Added htmlspecialchars() to answers in action=id.

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/trunk/unstable@94 b72ed6b6-b9f8-46b5-92b4-906544132732
LimeSurvey · Mar 21, 2003 · bde22a2 · bde22a2
1 parent a5b4d2e
commit bde22a2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/admin/browse.php b/admin/browse.php
@@ -124,7 +124,6 @@
 
 	$fnames[] = array("id", "id", "id");
 	foreach ($fnrows as $fnrow)
-	#while ($fnrow = mysql_fetch_array($fnresult))
 		{
 		$field = "{$fnrow['sid']}X{$fnrow['gid']}X{$fnrow['qid']}";
 		$ftitle = "Grp{$fnrow['gid']}Qst{$fnrow['title']}";
@@ -178,7 +177,8 @@
 			{
 			echo "\t<tr>\n";
 			echo "\t\t<td bgcolor='#EFEFEF' valign='top' align='right' width='33%' style='padding-right: 5px'>$setfont<b>{$fnames[$i][2]}</b></td>\n";
-			echo "\t\t<td valign='top' style='padding-left: 5px'>$setfont{$idrow[$fnames[$i][0]]}</td>\n";
+			echo "\t\t<td valign='top' style='padding-left: 5px'>$setfont";
+			echo htmlspecialchars($idrow[$fnames[$i][0]], ENT_QUOTES) . "</td>\n";
 			echo "\t</tr>\n";
 			echo "\t<tr><td colspan='2' bgcolor='#CCCCCC' height='1'></td></tr>\n";
 			}