Escape special chars.
This commit is contained in:
@@ -55,12 +55,12 @@
|
|||||||
{
|
{
|
||||||
// audio content
|
// audio content
|
||||||
case 'audio/mpeg':
|
case 'audio/mpeg':
|
||||||
?><embed width=620 height=100 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
|
?><embed width=620 height=100 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
|
||||||
break;
|
break;
|
||||||
// video content
|
// video content
|
||||||
case 'application/x-flash-video':
|
case 'application/x-flash-video':
|
||||||
case 'video/mpeg':
|
case 'video/mpeg':
|
||||||
?><embed width=620 height=460 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
|
?><embed width=620 height=460 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
|
||||||
break;
|
break;
|
||||||
default:
|
default:
|
||||||
// do nothing
|
// do nothing
|
||||||
|
Reference in New Issue
Block a user