From: <par...@us...> - 2010-04-13 15:45:55
|
Update of /cvsroot/phpicalendar/phpicalendar/functions/init In directory sfp-cvsdas-2.v30.ch3.sourceforge.com:/tmp/cvs-serv16185/functions/init Modified Files: sanitize.php Log Message: Properly sanitize dollar signs in event text (regression from new sanitize code in 2.4) Index: sanitize.php =================================================================== RCS file: /cvsroot/phpicalendar/phpicalendar/functions/init/sanitize.php,v retrieving revision 1.6 retrieving revision 1.7 diff -C2 -d -r1.6 -r1.7 *** sanitize.php 27 May 2009 17:21:01 -0000 1.6 --- sanitize.php 13 Apr 2010 15:45:47 -0000 1.7 *************** *** 54,57 **** --- 54,58 ---- $string = preg_replace('/<br\s*\/?>/', "\n", $string); + $string = str_replace('$', '$', $string); $string = str_replace('&', '&', $string); $string = str_replace('<', '<', $string); *************** *** 59,62 **** --- 60,64 ---- $string = str_replace('\'', ''', $string); $string = str_replace('"', '"', $string); + $string = str_replace('$', '$', $string); $string = str_replace("\n", '<br />', $string); |