Escape special chars.
This commit is contained in:
@@ -55,12 +55,12 @@
|
||||
{
|
||||
// audio content
|
||||
case 'audio/mpeg':
|
||||
?><embed width=620 height=100 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
|
||||
?><embed width=620 height=100 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
|
||||
break;
|
||||
// video content
|
||||
case 'application/x-flash-video':
|
||||
case 'video/mpeg':
|
||||
?><embed width=620 height=460 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
|
||||
?><embed width=620 height=460 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
|
||||
break;
|
||||
default:
|
||||
// do nothing
|
||||
|
Reference in New Issue
Block a user