mirror of
https://github.com/pandorafms/pandorafms.git
synced 2025-07-28 08:14:38 +02:00
fix vulnerability
This commit is contained in:
parent
e6aee8582d
commit
98b358e7ad
@ -4750,7 +4750,7 @@ function events_page_comments($event, $ajax=false)
|
|||||||
foreach ($comm as $c) {
|
foreach ($comm as $c) {
|
||||||
$data[0] = '<b>'.$c['action'].' by '.$c['id_user'].'</b>';
|
$data[0] = '<b>'.$c['action'].' by '.$c['id_user'].'</b>';
|
||||||
$data[0] .= '<br><br><i>'.date($config['date_format'], $c['utimestamp']).'</i>';
|
$data[0] .= '<br><br><i>'.date($config['date_format'], $c['utimestamp']).'</i>';
|
||||||
$data[1] = '<p style="word-break: break-word;">'.stripslashes(str_replace(['\n', '\r'], '<br/>', $c['comment'])).'</p>';
|
$data[1] = '<p style="word-break: break-word;">'.strip_tags($c['comment'], '<br>').'</p>';
|
||||||
$table_comments->data[] = $data;
|
$table_comments->data[] = $data;
|
||||||
}
|
}
|
||||||
break;
|
break;
|
||||||
|
Loading…
x
Reference in New Issue
Block a user