|
|
@@ -236,10 +236,11 @@ if ($user->isAdmin()) {
|
|
236
|
236
|
}
|
|
237
|
237
|
|
|
238
|
238
|
$date = ($isEdition) ? strtotime($post["date"]) : time();
|
|
239
|
|
- $title = ($isEdition) ? stripslashes($post["title"]) : "";
|
|
|
239
|
+ $title = ($isEdition) ? htmlentities(stripslashes($post["title"])) : "";
|
|
240
|
240
|
$body = ($isEdition) ? stripslashes($post["description"]) : "";
|
|
241
|
241
|
$url = ($isEdition) ? $post["url"] : "";
|
|
242
|
242
|
|
|
|
243
|
+
|
|
243
|
244
|
switch ($_GET["new"]) {
|
|
244
|
245
|
case "post":
|
|
245
|
246
|
$input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editBody}");
|