NobuNobu
nobun****@users*****
2005年 8月 24日 (水) 18:40:22 JST
Index: xoops2jp/html/modules/system/admin/preferences/main.php diff -u xoops2jp/html/modules/system/admin/preferences/main.php:1.4 xoops2jp/html/modules/system/admin/preferences/main.php:1.4.2.1 --- xoops2jp/html/modules/system/admin/preferences/main.php:1.4 Wed Aug 3 21:39:17 2005 +++ xoops2jp/html/modules/system/admin/preferences/main.php Wed Aug 24 18:40:22 2005 @@ -1,5 +1,5 @@ <?php -// $Id: main.php,v 1.4 2005/08/03 12:39:17 onokazu Exp $ +// $Id: main.php,v 1.4.2.1 2005/08/24 09:40:22 nobunobu Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -139,7 +139,7 @@ $tplsetlist =& $tplset_handler->getList(); asort($tplsetlist); foreach ($tplsetlist as $key => $name) { - $ele->addOption($key, $name); + $ele->addOption($key, htmlspecialchars($name, ENT_QUOTES)); } // old theme value is used to determine whether to update cache or not. kind of dirty way $form->addElement(new XoopsFormHidden('_old_theme', $config[$i]->getConfValueForOutput()));