[repair_settings] Fix the problem with double quotes in the mysql pas…

…sword reported by Arantor [Topic 480181] Signed-off-by: emanuele <emanuele45@gmail.com>
eurich · Jul 2, 2012 · 2c1bab6 · 2c1bab6
1 parent ad0e712
commit 2c1bab6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/repair_settings.php b/repair_settings.php
@@ -555,7 +555,7 @@ function restoreAll()
 			elseif ($info[1] == 'string')
 			{
 				echo '
-								<input type="text" name="', $info[0], 'settings[', $setting, ']" id="', $setting, '" value="', isset($settings[$setting]) ? $settings[$setting] : '', '" size="', $settings_section == 'path_url_settings' || $settings_section == 'theme_path_url_settings' ? '60" style="width: 80%;' : '30', '" class="input_text" />';
+								<input type="text" name="', $info[0], 'settings[', $setting, ']" id="', $setting, '" value="', isset($settings[$setting]) ? htmlspecialchars($settings[$setting]) : '', '" size="', $settings_section == 'path_url_settings' || $settings_section == 'theme_path_url_settings' ? '60" style="width: 80%;' : '30', '" class="input_text" />';
 
 				if (isset($info[2]))
 					echo '