위젯코드 생성시 htmlspecialchars()함수로 처리 후 반환

git-svn-id: http://xe-core.googlecode.com/svn/sandbox@3381 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
bnu 2007-12-19 10:58:56 +00:00
parent 5a9571fdc5
commit 6d1e27a3c4

View file

@ -39,8 +39,9 @@
$attribute = array();
if($vars) {
foreach($vars as $key => $val) {
if(strpos($val,'|@|')>0) $val = str_replace('|@|',',',$val);
$attribute[] = sprintf('%s="%s"', $key, str_replace('"','\"',$val));
if(strpos($val,'|@|') > 0) $val = str_replace('|@|', ',', $val);
$val = htmlspecialchars($val);
$attribute[] = sprintf('%s="%s"', $key, $val);
}
}