diff options
| author | Greg Roach <fisharebest@gmail.com> | 2013-08-21 21:27:49 +0100 |
|---|---|---|
| committer | Greg Roach <fisharebest@gmail.com> | 2013-08-21 22:32:38 +0100 |
| commit | d84b90e3c03be4cecad688d90f9de663e2117389 (patch) | |
| tree | e2d33121ef19b21b393cb58f1071eb3ecd9a0d20 /library/WT/Stats.php | |
| parent | 5ddc3168f6e7a1defb7ab74173d0d5621f7332ad (diff) | |
| download | webtrees-d84b90e3c03be4cecad688d90f9de663e2117389.tar.gz webtrees-d84b90e3c03be4cecad688d90f9de663e2117389.tar.bz2 webtrees-d84b90e3c03be4cecad688d90f9de663e2117389.zip | |
Add escaping functions, based on semantics of what is being escaped
Diffstat (limited to 'library/WT/Stats.php')
| -rw-r--r-- | library/WT/Stats.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/library/WT/Stats.php b/library/WT/Stats.php index 6d9c03d2b0..401b67298d 100644 --- a/library/WT/Stats.php +++ b/library/WT/Stats.php @@ -3409,9 +3409,9 @@ class WT_Stats { if (WT_USER_ID) { foreach ($loggedusers as $user_id=>$user_name) { if ($type == 'list') { - $content .= "<li>".htmlspecialchars(getUserFullName($user_id))." - {$user_name}"; + $content .= "<li>".WT_Filter::escapeHtml(getUserFullName($user_id))." - {$user_name}"; } else { - $content .= htmlspecialchars(getUserFullName($user_id))." - {$user_name}"; + $content .= WT_Filter::escapeHtml(getUserFullName($user_id))." - {$user_name}"; } if (WT_USER_ID != $user_id && get_user_setting($user_id, 'contactmethod') != 'none') { if ($type == 'list') { |