fix for MDL-13173: quotes in HotPot activity name

2008-01-26 08:26:17 +00:00
parent 70c7e67dcb
commit 79c57d1b99
1 changed files with 1 additions and 1 deletions
@@ -75,7 +75,7 @@ $text_source_options = array(
                print '<input type="hidden" name="namesource" value="'.HOTPOT_TEXTSOURCE_SPECIFIC.'">';
            }
 			print '<span id="nameSPAN">';
-            print '<input type="text" name="name" size=40 value="'.$form->name.'">';
+            print '<input type="text" name="name" size="40" value="'.htmlspecialchars($form->name).'" />';
 			print '</span>';
        ?></td>
    </tr>