From 071644795cdaf97601ba96d9c89b7910b49ab617 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@madoka.spb.ru>
Date: Mon, 22 May 2006 04:54:51 +0100
Subject: filter editor uses prototype

---
 functions.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'functions.php')

diff --git a/functions.php b/functions.php
index 73ef85774..0c1a959a7 100644
--- a/functions.php
+++ b/functions.php
@@ -1601,7 +1601,7 @@
 				$is_selected = "";
 			}
 			printf("<option $is_selected value='%d'>%s</option>", 
-				$line["id"], db_unescape_string($line["title"]));
+				$line["id"], htmlspecialchars(db_unescape_string($line["title"])));
 		}
 	
 		print "</select>";
@@ -1630,7 +1630,7 @@
 				$is_selected = "";
 			}
 			printf("<option $is_selected value='%d'>%s</option>", 
-				$line["id"], $line["title"]);
+				$line["id"], htmlspecialchars(db_unescape_string($line["title"])));
 		}
 
 		print "</select>";
-- 
cgit v1.2.3-54-g00ecf