Escape special chars.

This commit is contained in:
Michal Čihař
2009-03-24 17:36:50 +00:00
parent 21bf5ca339
commit 6b61b06c95

View File

@@ -55,12 +55,12 @@
{ {
// audio content // audio content
case 'audio/mpeg': case 'audio/mpeg':
?><embed width=620 height=100 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php ?><embed width=620 height=100 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
break; break;
// video content // video content
case 'application/x-flash-video': case 'application/x-flash-video':
case 'video/mpeg': case 'video/mpeg':
?><embed width=620 height=460 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php ?><embed width=620 height=460 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
break; break;
default: default:
// do nothing // do nothing