diff options
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/bbcode.inc.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/bbcode.inc.php b/templates/bbcode.inc.php index e04d575..8a41d46 100644 --- a/templates/bbcode.inc.php +++ b/templates/bbcode.inc.php @@ -7,7 +7,7 @@ class bbcode_template { function Get($data) { if($data['title']) - $title = strtr($data['title'], array('<' => '<', '>' => '>', '&' => '&', '"' => '"')); + $title = htmlspecialchars($data['title']); else $title = strtr($data['_page'], array(':' => ' - ')); $content = '<h2>' . $title . '</h2>' . $GLOBALS['bbcode']->Parse($data['code']); |