Now sanitizes the user response fields before displaying them in summary form.

svn path=/trunk/boinc/; revision=1713
This commit is contained in:
David Anderson 2003-07-17 21:25:36 +00:00
parent 9944eb6e09
commit 298e8d068c
1 changed files with 2 additions and 1 deletions

View File

@ -2,6 +2,7 @@
require_once("project_specific/project.inc"); require_once("project_specific/project.inc");
require_once("profile.inc"); require_once("profile.inc");
require_once("sanitize_html.inc");
// Generates the html files which comprise the photo gallery. // Generates the html files which comprise the photo gallery.
// $room: which gallery to generate (user, computer). // $room: which gallery to generate (user, computer).
@ -301,7 +302,7 @@ function get_profile_summary($userid) {
if (strlen($row['response1']) != 0) { if (strlen($row['response1']) != 0) {
$description = "(\"" . substr($row['response1'], 0, MAX_DESC_LENGTH); $description = "(\"" . sanitize_html(substr($row['response1'], 0, MAX_DESC_LENGTH));
if (strlen($row['response1']) >= MAX_DESC_LENGTH) { if (strlen($row['response1']) >= MAX_DESC_LENGTH) {
$description = $description . "..."; $description = $description . "...";
} }