Escape special chars.

This commit is contained in:
Michal Čihař
2009-03-24 17:36:50 +00:00
parent 21bf5ca339
commit 6b61b06c95

View File

@@ -55,12 +55,12 @@
{
// audio content
case 'audio/mpeg':
?><embed width=620 height=100 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
?><embed width=620 height=100 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
break;
// video content
case 'application/x-flash-video':
case 'video/mpeg':
?><embed width=620 height=460 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
?><embed width=620 height=460 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
break;
default:
// do nothing