Ticket #214: 01212_weblog_comments_noname.diff

File 01212_weblog_comments_noname.diff, 1.5 kB (added by rho, 7 months ago)

a/mod/blog/lib/weblogs_comments_add.php

old	new
37	37	);
38	38
39	39	if (logged_on) {
40		$comment_name = $_SESSION['name'];
	40	$comment_name = htmlspecialchars($_SESSION['name'], ENT_COMPAT, 'utf-8');
	41	$run_result .= '<input type="hidden" name="postedname" value="'.$comment_name.'" />';
41	42	} else {
42	43	$comment_name = __gettext("Guest");
	44
	45	$run_result .= templates_draw(array(
	46
	47	'context' => 'databox1',
	48	'name' => __gettext("Your name"),
	49	'column1' => "<input type=\"text\" name=\"postedname\" value=\"".htmlspecialchars($comment_name, ENT_COMPAT, 'utf-8')."\" />"
	50
	51	)
	52	);
	53
43	54	}
44	55
45		~~$run_result .= templates_draw(array(~~
46
47		~~'context' => 'databox1',~~
48		~~'name' => __gettext("Your name"),~~
49		~~'column1' => "<input type=\"text\" name=\"postedname\" value=\"".htmlspecialchars($comment_name, ENT_COMPAT, 'utf-8')."\" />"~~
50
51		)
52		);
53	56
54	57	$run_result .= templates_draw(array(
55	58