From: Brion Vibber <brion@users.mediawiki.org>
Date: Thu, 14 Oct 2004 06:21:33 +0000 (+0000)
Subject: Escape HTMl output
X-Git-Tag: 1.5.0alpha1~1549
X-Git-Url: http://git.cyclocoop.org/%7D%7Cconcat%7B?a=commitdiff_plain;h=d1e1dbf891c76d45c44490977383c08df0210c0b;p=lhc%2Fweb%2Fwiklou.git

Escape HTMl output
---

diff --git a/includes/SpecialPreferences.php b/includes/SpecialPreferences.php
index 57f857bb4c..893479304c 100644
--- a/includes/SpecialPreferences.php
+++ b/includes/SpecialPreferences.php
@@ -526,7 +526,7 @@ class PreferencesForm {
 		<legend>$timezone</legend>
 		<div><b>$tzServerTime:</b> $nowserver</div>
 		<div><b>$ltz:</b> $nowlocal</div>
-		<div><label>$tzo*: <input type='text' name=\"wpHourDiff\" value=\"{$this->mHourDiff}\" size='6' /></label></div>
+		<div><label>$tzo*: <input type='text' name=\"wpHourDiff\" value=\"" . htmlspecialchars( $this->mHourDiff ) . "\" size='6' /></label></div>
 		<div><input type=\"button\" value=\"$tzGuess\" onclick=\"javascript:guessTimezone()\" id=\"guesstimezonebutton\" style=\"display:none\" /></div>
 		<div class='prefsectiontip'>* {$tzt}</div>
 	</fieldset>\n\n" );