From 9a320266804890028d660a08a0a79e1456b0571c Mon Sep 17 00:00:00 2001 From: Jason Oster Date: Tue, 26 May 2009 20:15:15 +0000 Subject: Sanitize print view and add URL links --- functions/template.php | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/functions/template.php b/functions/template.php index a7f183c..79ada79 100644 --- a/functions/template.php +++ b/functions/template.php @@ -85,13 +85,15 @@ class Page { } $seen_events["$new_key2"] = 1; $day_events++; - if (isset($new_val2['event_text'])) { - $event_text = stripslashes(urldecode($new_val2['event_text'])); - $location = stripslashes(urldecode($new_val2['location'])); - $description = stripslashes(urldecode($new_val2['description'])); - $event_start = $new_val2['event_start']; - $event_end = $new_val2['event_end']; - if (isset($new_val2['display_end'])) $event_end = $new_val2['display_end']; + if (isset($new_val2['event_text'])) { + $event_text = sanitizeForWeb(stripslashes(urldecode($new_val2['event_text']))); + $location = sanitizeForWeb(stripslashes(urldecode($new_val2['location']))); + $description = sanitizeForWeb(stripslashes(urldecode($new_val2['description']))); + if (!empty($description)) $description = ereg_replace("[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]",'\0', $description); + + $event_start = $new_val2['event_start']; + $event_end = $new_val2['event_end']; + if (isset($new_val2['display_end'])) $event_end = $new_val2['display_end']; if (!isset($new_val2['event_start'])) { $event_start = $lang['l_all_day']; $event_start2 = ''; -- cgit v1.2.3