aboutsummaryrefslogtreecommitdiffstats
path: root/functions/init/sanitize.php
diff options
context:
space:
mode:
authorJason Oster <parasytic@users.sourceforge.net>2010-04-13 15:45:47 +0000
committerJason Oster <parasytic@users.sourceforge.net>2010-04-13 15:45:47 +0000
commit5aa9f5230c240a952cdc6eb685b65df36fe7abfd (patch)
tree164ae1cbf9c9f765ac357f1f5aaae5f720ed6af3 /functions/init/sanitize.php
parent873688e87be6762e794cfc6e11c2c9d407d8929a (diff)
downloadphpicalendar-5aa9f5230c240a952cdc6eb685b65df36fe7abfd.tar.gz
phpicalendar-5aa9f5230c240a952cdc6eb685b65df36fe7abfd.tar.bz2
phpicalendar-5aa9f5230c240a952cdc6eb685b65df36fe7abfd.zip
Properly sanitize dollar signs in event text (regression from new sanitize code in 2.4)
Diffstat (limited to 'functions/init/sanitize.php')
-rw-r--r--functions/init/sanitize.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/functions/init/sanitize.php b/functions/init/sanitize.php
index 39b8246..e3e6525 100644
--- a/functions/init/sanitize.php
+++ b/functions/init/sanitize.php
@@ -53,11 +53,13 @@ function chopToWordCount($string, $count) {
function sanitizeForWeb($string) {
$string = preg_replace('/<br\s*\/?>/', "\n", $string);
+ $string = str_replace('&#36;', '$', $string);
$string = str_replace('&', '&amp;', $string);
$string = str_replace('<', '&lt;', $string);
$string = str_replace('>', '&gt;', $string);
$string = str_replace('\'', '&#39;', $string);
$string = str_replace('"', '&#34;', $string);
+ $string = str_replace('$', '&#36;', $string);
$string = str_replace("\n", '<br />', $string);
$string = str_replace("\t", ' &nbsp; &nbsp; ', $string);

© 2014-2021 Faster IT GmbH | imprint | privacy policy