onokazu
onoka****@users*****
2005年 6月 30日 (木) 00:16:19 JST
Index: xoops2jp/html/include/comment_form.php diff -u xoops2jp/html/include/comment_form.php:1.2.6.2.2.1 xoops2jp/html/include/comment_form.php:1.2.6.2.2.2 --- xoops2jp/html/include/comment_form.php:1.2.6.2.2.1 Sun Jun 19 01:26:12 2005 +++ xoops2jp/html/include/comment_form.php Thu Jun 30 00:16:19 2005 @@ -1,5 +1,5 @@ <?php -// $Id: comment_form.php,v 1.2.6.2.2.1 2005/06/18 16:26:12 nobunobu Exp $ +// $Id: comment_form.php,v 1.2.6.2.2.2 2005/06/29 15:16:19 onokazu Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -114,7 +114,7 @@ } else { $hidden_value = ''; } - $cform->addElement(new XoopsFormHidden($extra_param, $hidden_value)); + $cform->addElement(new XoopsFormHidden($extra_param, htmlspecialchars($hidden_value, ENT_QUOTES))); } } }