Escape special chars.

This commit is contained in:
Michal Čihař
2009-03-24 17:36:50 +00:00
parent e6ddf2e087
commit dc9feef044

View File

@@ -51,12 +51,12 @@
{
// audio content
case 'audio/mpeg':
?><embed width=620 height=100 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
?><embed width=620 height=100 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
break;
// video content
case 'application/x-flash-video':
case 'video/mpeg':
?><embed width=620 height=460 src="<?php echo $bs_file_path; ?>" autostart=true></embed><?php
?><embed width=620 height=460 src="<?php echo htmlspecialchars($bs_file_path); ?>" autostart=true></embed><?php
break;
default:
// do nothing