From dc9feef044a8e4cfda4ca62f4196895ca1f382a1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Tue, 24 Mar 2009 17:36:50 +0000
Subject: [PATCH] Escape special chars.

---
 bs_play_media.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bs_play_media.php b/bs_play_media.php
index bf8a2da2a..c681be6d3 100644
--- a/bs_play_media.php
+++ b/bs_play_media.php
@@ -51,12 +51,12 @@
             {
                 // audio content
                 case 'audio/mpeg':
-                    ?><embed width=620 height=100 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
+                    ?><embed width=620 height=100 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
                     break;
                 // video content
                 case 'application/x-flash-video':
                 case 'video/mpeg':
-                    ?><embed width=620 height=460 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
+                    ?><embed width=620 height=460 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
                     break;
                 default:
                     // do nothing