From 83c6281a88cb7b2739637a70107af393a00d58d8 Mon Sep 17 00:00:00 2001
From: David Anderson <davea@ssl.berkeley.edu>
Date: Sun, 18 Apr 2004 02:10:55 +0000
Subject: [PATCH] *** empty log message ***

svn path=/trunk/boinc/; revision=3270
---
 html/forum/forum.php | 6 +++---
 html/inc/forum.inc   | 2 +-
 html/user/stats.php  | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/html/forum/forum.php b/html/forum/forum.php
index 6b0670d0a4..b5f6268589 100644
--- a/html/forum/forum.php
+++ b/html/forum/forum.php
@@ -90,18 +90,18 @@ if ($category->is_helpdesk) {
 $threads = getThreads($forum->id, $_GET['start'], $n, $sort_style);
 $n = 0;
 
-while($thread = mysql_fetch_object($threads)) {
+while ($thread = mysql_fetch_object($threads)) {
     $user = lookup_user_id($thread->owner);
     $first_post = getFirstPost($thread->id);
     $excerpt = sub_sentence($first_post->content, ' ', EXCERPT_LENGTH, true);
     echo "
         <tr class=row$n style=\"font-size:8pt; text-align:center\">
-        <td style=\"font-size:10pt; text-align:left\"><a href=\"thread.php?id=", $thread->id, "\"><b>", stripslashes($thread->title), "</b></a><br>
+        <td style=\"font-size:10pt; text-align:left\"><a href=\"thread.php?id=", $thread->id, "\"><b>", strip_tags(stripslashes($thread->title)), "</b></a><br>
     ";
     $n = ($n+1)%2;
 
     if ($category->is_helpdesk) {
-        echo stripslashes($excerpt);
+        echo strip_tags(stripslashes($excerpt));
         $na = $thread->sufferers + 1;
         $x = time_diff_str($first_post->timestamp, time());
         echo "<br><font size=-2>Asked $x; asked $na times";
diff --git a/html/inc/forum.inc b/html/inc/forum.inc
index 05513cb95f..c0c64fc3f4 100644
--- a/html/inc/forum.inc
+++ b/html/inc/forum.inc
@@ -453,7 +453,7 @@ function show_forum_title($forum=NULL, $thread=NULL, $helpdesk=false) {
             echo "<a href=index.php>", " Message boards</a> : ";
         }
         echo "<a href=\"forum.php?id=", $forum->id, "\">", $forum->title, "</a> : ";
-        echo stripslashes($thread->title);
+        echo strip_tags(stripslashes($thread->title));
         echo "</span><br>";
     } else {
         echo "Invalid input to show_forum_title<br>";
diff --git a/html/user/stats.php b/html/user/stats.php
index 05d882e4dc..efaa46b3c2 100644
--- a/html/user/stats.php
+++ b/html/user/stats.php
@@ -28,7 +28,7 @@ developed by <a href=mailto:stats@boinc.dk>Janus Kristensen</a>.
 developed by Sascha Pfalz.
 <li>
 <a href=http://stats.boincbzh.net/BZHwds/index.php>BOINC Alliance Francophone</a>,
-developed by Vincent Mary (vincent.mary at univ-rennes1.fr).
+developed by Vincent Mary (email: stats at hoincbzh dot net).
 Supports competition between 'mini-teams'.
 </ul>
 These systems are implemented using PHP,