Revision: 1739
          http://mrbs.svn.sourceforge.net/mrbs/?rev=1739&view=rev
Author:   cimorrison
Date:     2011-01-06 13:51:55 +0000 (Thu, 06 Jan 2011)

Log Message:
-----------
Added missing HTML escaping

Modified Paths:
--------------
    mrbs/trunk/web/edit_area_room.php

Modified: mrbs/trunk/web/edit_area_room.php
===================================================================
--- mrbs/trunk/web/edit_area_room.php   2011-01-06 13:46:39 UTC (rev 1738)
+++ mrbs/trunk/web/edit_area_room.php   2011-01-06 13:51:55 UTC (rev 1739)
@@ -493,7 +493,7 @@
           {
             echo " selected=\"selected\"";
           }
-          echo ">" . $row_area['area_name'] . "</option>\n";
+          echo ">" . htmlspecialchars($row_area['area_name']) . "</option>\n";
         }  
       echo "</select>\n";
       echo "<input type=\"hidden\" name=\"old_area\" value=\"" . 
$row['area_id'] . "\">\n";


This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Mrbs-commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mrbs-commits

Reply via email to