[php-blog-cvs] r1040 - trunk/include/admin

[garvinhicking at B. <gar...@ma...>]

Author: garvinhicking
Date: 2006-03-30 12:37:48 +0200 (Thu, 30 Mar 2006)
New Revision: 1040

Modified:
   trunk/include/admin/entries.inc.php
Log:
use htmlspecialchars()


Modified: trunk/include/admin/entries.inc.php
===================================================================
--- trunk/include/admin/entries.inc.php	2006-03-30 10:37:43 UTC (rev 1039)
+++ trunk/include/admin/entries.inc.php	2006-03-30 10:37:48 UTC (rev 1040)
@@ -231,7 +231,7 @@
                 <table width="100%" cellspacing="0" cellpadding="3">
                     <tr>
                         <td>
-                            <strong><?php echo $entry_pre; ?><a href="?serendipity[action]=admin&amp;serendipity[adminModule]=entries&amp;serendipity[adminAction]=edit&amp;serendipity[id]=<?php echo $entry['id']; ?>" title="#<?php echo $entry['id']; ?>"><?php echo serendipity_truncateString($entry['title'],50) ?></a></strong>
+                            <strong><?php echo $entry_pre; ?><a href="?serendipity[action]=admin&amp;serendipity[adminModule]=entries&amp;serendipity[adminAction]=edit&amp;serendipity[id]=<?php echo $entry['id']; ?>" title="#<?php echo $entry['id']; ?>"><?php echo serendipity_truncateString(htmlspecialchars($entry['title']),50) ?></a></strong>
                         </td>
                         <td align="right">
                             <?php echo serendipity_formatTime(DATE_FORMAT_SHORT, $entry['timestamp']) . ' ' .$lm; ?>