CVS update: xoops2jp/html/modules/system/admin/comments (xoops-cvslog 602) - XOOPS

Index: xoops2jp/html/modules/system/admin/comments/main.php
diff -u xoops2jp/html/modules/system/admin/comments/main.php:1.5 xoops2jp/html/modules/system/admin/comments/main.php:1.6

--- xoops2jp/html/modules/system/admin/comments/main.php:1.5	Wed Aug  3 21:39:16 2005
+++ xoops2jp/html/modules/system/admin/comments/main.php	Tue Oct 25 11:57:28 2005
@@ -1,5 +1,5 @@
 <?php
-// $Id: main.php,v 1.5 2005/08/03 12:39:16 onokazu Exp $
+// $Id: main.php,v 1.6 2005/10/25 02:57:28 onokazu Exp $
 //  ------------------------------------------------------------------------ //
 //                XOOPS - PHP Content Management System                      //
 //                    Copyright (c) 2000 XOOPS.org                           //
@@ -125,7 +125,7 @@
                     $poster_uname = '<a href="'.XOOPS_URL.'/userinfo.php?uid='.$comments[$i]->getVar('com_uid').'">'.$poster->getVar('uname').'</a>';
                 }
             }
-            $icon = ($comments[$i]->getVar('com_icon') != '') ? '<img src="'.XOOPS_URL.'/images/subject/'.$comments[$i]->getVar('com_icon').'" alt="" />' : '<img src="'.XOOPS_URL.'/images/icons/no_posticon.gif" alt="" />';
+            $icon = ($comments[$i]->getVar('com_icon') != '') ? '<img src="'.XOOPS_URL.'/images/subject/'.htmlspecialchars($comments[$i]->getVar('com_icon')).'" alt="" />' : '<img src="'.XOOPS_URL.'/images/icons/no_posticon.gif" alt="" />';
             echo '<tr align="center"><td class="'.$class.'">'.$icon.'</td><td class="'.$class.'" align="left"><a href="admin.php?fct=comments&amp;op=jump&amp;com_id='.$i.'">'. $comments[$i]->getVar('com_title').'</a></td><td class="'.$class.'">'.formatTimestamp($comments[$i]->getVar('com_created'), 'm').'</td><td class="'.$class.'">'.$poster_uname.'</td><td class="'.$class.'">'.$comments[$i]->getVar('com_ip').'</td><td class="'.$class.'">'.$module_array[$comments[$i]->getVar('com_modid')].'</td><td class="'.$class.'">'.$status_array2[$comments[$i]->getVar('com_status')].'</td><td class="'.$class.'" align="right"><a href="admin/comments/comment_edit.php?com_id='.$i.'">'._EDIT.'</a> <a href="admin/comments/comment_delete.php?com_id='.$i.'">'._DELETE.'</a></td></tr>';
         }
         echo '</table>';


XOOPS

[xoops-cvslog 602] CVS update: xoops2jp/html/modules/system/admin/comments