changeset 240:dee1a11e71e9

Use htmlspecialchars() instead of htmlentities().
author Matti Hamalainen <ccr@tnsp.org>
date Wed, 28 Mar 2018 13:24:53 +0300
parents 2749d9637a44
children 474d88b8188b
files mgallery.php
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/mgallery.php	Tue Mar 27 15:19:30 2018 +0300
+++ b/mgallery.php	Wed Mar 28 13:24:53 2018 +0300
@@ -99,13 +99,13 @@
 
 function chentities($str)
 {
-  return htmlentities($str, ENT_NOQUOTES, "UTF-8");
+  return htmlspecialchars($str, ENT_NOQUOTES, "UTF-8");
 }
 
 
 function dhentities($str)
 {
-  return htmlentities($str, ENT_COMPAT, "UTF-8");
+  return htmlspecialchars($str, ENT_COMPAT, "UTF-8");
 }