diff --git a/admin/index.php b/admin/index.php index fe5e848..b9ed65b 100644 --- a/admin/index.php +++ b/admin/index.php @@ -236,10 +236,11 @@ if ($user->isAdmin()) { } $date = ($isEdition) ? strtotime($post["date"]) : time(); - $title = ($isEdition) ? stripslashes($post["title"]) : ""; + $title = ($isEdition) ? htmlentities(stripslashes($post["title"])) : ""; $body = ($isEdition) ? stripslashes($post["description"]) : ""; $url = ($isEdition) ? $post["url"] : ""; + switch ($_GET["new"]) { case "post": $input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editBody}");