MDL-15392: fix output sanitization.

This commit is contained in:
scyrma
2008-06-27 03:35:44 +00:00
parent 7446f0d0ff
commit cd4a340157
+2 -2
View File
@@ -154,9 +154,9 @@
global $USER, $CFG, $COURSE, $ME;
$template['body'] = format_text($blogEntry->summary, $blogEntry->format);
$template['title'] = '<a name="'. $blogEntry->subject .'"></a>';
$template['title'] = '<a name="'. s($blogEntry->subject) .'"></a>';
//enclose the title in nolink tags so that moodle formatting doesn't autolink the text
$template['title'] .= '<span class="nolink">'.$blogEntry->subject.'</span>';
$template['title'] .= '<span class="nolink">'. format_string($blogEntry->subject) .'</span>';
$template['userid'] = $blogEntry->userid;
$template['author'] = fullname(get_record('user','id',$blogEntry->userid));
$template['lastmod'] = userdate($blogEntry->lastmodified);