From 0ac937251789e0149035cbb98e3d34e6f010e082 Mon Sep 17 00:00:00 2001 From: michaelpenne Date: Fri, 24 Feb 2006 19:42:13 +0000 Subject: [PATCH] [BugFix] Bug #4828 - \ stripping problem --- question/questiontypes/essay/questiontype.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/question/questiontypes/essay/questiontype.php b/question/questiontypes/essay/questiontype.php index 5116e2425a5..7e4aa361187 100644 --- a/question/questiontypes/essay/questiontype.php +++ b/question/questiontypes/essay/questiontype.php @@ -101,11 +101,11 @@ class quiz_essay_qtype extends quiz_default_questiontype { // this prints out the student response box if (isset($state->responses[''])) { // security problem. responses[''] is never cleaned before it is sent to the db (I think) - $value = clean_param($state->responses[''], PARAM_CLEANHTML); + $value = clean_param(addslashes($state->responses['']), PARAM_CLEANHTML); } else { $value = ""; } - + $inputname = $nameprefix; echo "

$stranswer: ".