fix for MDL-13173: quotes in HotPot activity name

2008-01-26 08:25:51 +00:00
parent 58b037a501
commit 5a66d54c05
1 changed files with 1 additions and 1 deletions
@@ -33,7 +33,7 @@ $text_source_options = array(
 				print '<input type="hidden" name="namesource" value="'.HOTPOT_TEXTSOURCE_SPECIFIC.'">';
 			}
 			print '<span id="nameSPAN">';
-			print '<input type="text" name="name" size=40 value="'.$form->name.'">';
+            print '<input type="text" name="name" size="40" value="'.htmlspecialchars($form->name).'" />';
 			print '</span>';
 		?></td>
 	</tr>