diff options
Diffstat (limited to 'functions/template.php')
| -rw-r--r-- | functions/template.php | 16 |
1 files changed, 9 insertions, 7 deletions
diff --git a/functions/template.php b/functions/template.php index a7f183c..79ada79 100644 --- a/functions/template.php +++ b/functions/template.php @@ -85,13 +85,15 @@ class Page { } $seen_events["$new_key2"] = 1; $day_events++; - if (isset($new_val2['event_text'])) { - $event_text = stripslashes(urldecode($new_val2['event_text'])); - $location = stripslashes(urldecode($new_val2['location'])); - $description = stripslashes(urldecode($new_val2['description'])); - $event_start = $new_val2['event_start']; - $event_end = $new_val2['event_end']; - if (isset($new_val2['display_end'])) $event_end = $new_val2['display_end']; + if (isset($new_val2['event_text'])) { + $event_text = sanitizeForWeb(stripslashes(urldecode($new_val2['event_text']))); + $location = sanitizeForWeb(stripslashes(urldecode($new_val2['location']))); + $description = sanitizeForWeb(stripslashes(urldecode($new_val2['description']))); + if (!empty($description)) $description = ereg_replace("[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]",'<a target="_new" href="\0">\0</a>', $description); + + $event_start = $new_val2['event_start']; + $event_end = $new_val2['event_end']; + if (isset($new_val2['display_end'])) $event_end = $new_val2['display_end']; if (!isset($new_val2['event_start'])) { $event_start = $lang['l_all_day']; $event_start2 = ''; |