Changeset 963

Show
Ignore:
Timestamp:
10/20/05 23:03:53 (3 years ago)
Author:
mbonetti
Message:

Fix for #219. Make sure you delete and re-create your bookmarklet.

Files:
1 modified

Legend:

Unmodified
Added
Removed

  • trunk/rss/admin/channels.php

    r948 r963  
    5656 
    5757    $bookmarklet = "javascript:void(document.location = " 
    58       ."('$b_url'.concat(document.location)))"; 
     58      ."('$b_url'.concat(escape(document.location))))"; 
    5959 
    6060    echo "<p class=\"bookmarklet\">" . LBL_ADMIN_BOOKMARKET_LABEL . " <a class=\"bookmarklet\" href=\"$bookmarklet\">".LBL_ADMIN_BOOKMARKLET_TITLE."</a></p>\n"; 
    … …  
    237237   $label = trim($_REQUEST['new_channel']); 
    238238   $fid = trim(rss_real_escape_string($_REQUEST['add_channel_to_folder'])); 
    239  
    240239    list($flabel) = rss_fetch_row(rss_query( 
    241240        "select name from " . getTable('folders') . " where id=$fid")); 
    … …  
    256255            rss_error(sprintf( 
    257256                LBL_ADMIN_OPML_IMPORT_FEED_INFO, 
    258                     $label,"/$flabel") 
     257                    htmlentities($label),"/$flabel") 
    259258                    . LBL_ADMIN_OK 
    260259                    . "&nbsp;[<a href=\"index.php?domain=".CST_ADMIN_DOMAIN_CHANNEL 
    … …  
    282281                        rss_error(sprintf( 
    283282                            LBL_ADMIN_OPML_IMPORT_FEED_INFO, 
    284                                 $label,"/$flabel") 
     283                                htmlentities($label),"/$flabel") 
    285284                                . LBL_ADMIN_OK 
    286285                                . "&nbsp;[<a href=\"index.php?domain=".CST_ADMIN_DOMAIN_CHANNEL