[cfinck] 36553: Escape characters for people using <, >, & or " in their full name

Author: cfinck
Date: Sat Sep 27 13:42:53 2008
New Revision: 36553

URL: http://svn.reactos.org/svn/reactos?rev=36553&view=rev
Log:
Escape characters for people using <, >, & or " in their full name

Modified:
    trunk/web/reactos.org/htdocs/peoplemap/ajax-getuser.php

Modified: trunk/web/reactos.org/htdocs/peoplemap/ajax-getuser.php
URL: http://svn.reactos.org/svn/reactos/trunk/web/reactos.org/htdocs/peoplemap/aj...
==============================================================================
--- trunk/web/reactos.org/htdocs/peoplemap/ajax-getuser.php [iso-8859-1] (original)
+++ trunk/web/reactos.org/htdocs/peoplemap/ajax-getuser.php [iso-8859-1] Sat Sep 27 13:42:53 2008
@@ -75,7 +75,7 @@
    	echo "<user>";
    	printf("<id>%u</id>", $row[0]);
    	printf("<username>%s</username>", $row[1]);
-		printf("<fullname>%s</fullname>", $row[2]);
+		printf("<fullname>%s</fullname>", htmlspecialchars($row[2]));
    	printf("<latitude>%s</latitude>", $row[3]);
    	printf("<longitude>%s</longitude>", $row[4]);
    	echo "</user>";