MDL-64372 userpix: Escape fullname string on userpix index page

2019-01-08 16:24:48 +01:00
parent 502650a3e2
commit 14f9bad3ce
1 changed files with 1 additions and 1 deletions
@@ -25,7 +25,7 @@ echo $OUTPUT->header();

 $rs = $DB->get_recordset_select("user", "deleted = 0 AND picture > 0", array(), "lastaccess DESC", user_picture::fields());
 foreach ($rs as $user) {
-    $fullname = fullname($user);
+    $fullname = s(fullname($user));
    echo "<a href=\"$CFG->wwwroot/user/view.php?id=$user->id&amp;course=1\" ".
         "title=\"$fullname\">";
    echo $OUTPUT->user_picture($user);