MrPetovan/friendica
2
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Escape values to input fields (and some 'title' and 'alt')

Browse source
This commit is contained in:
Fabrixxm 2015-02-16 09:30:12 +01:00
commit 9d3fb417c2
64 changed files with 209 additions and 186 deletions
Download patch file Download diff file Expand all files Collapse all files

12
view/templates/install_settings.tpl
View file

@ -10,17 +10,17 @@
<form id="install-form" action="{{$baseurl}}/install" method="post">
<input type="hidden" name="phpath" value="{{$phpath}}" />
<input type="hidden" name="dbhost" value="{{$dbhost}}" />
<input type="hidden" name="dbuser" value="{{$dbuser}}" />
<input type="hidden" name="dbpass" value="{{$dbpass}}" />
<input type="hidden" name="dbdata" value="{{$dbdata}}" />
<input type="hidden" name="phpath" value="{{$phpath|escape:'html'}}" />
<input type="hidden" name="dbhost" value="{{$dbhost|escape:'html'}}" />
<input type="hidden" name="dbuser" value="{{$dbuser|escape:'html'}}" />
<input type="hidden" name="dbpass" value="{{$dbpass|escape:'html'}}" />
<input type="hidden" name="dbdata" value="{{$dbdata|escape:'html'}}" />
<input type="hidden" name="pass" value="4" />
{{include file="field_input.tpl" field=$adminmail}}
{{$timezone}}
<input id="install-submit" type="submit" name="submit" value="{{$submit}}" />
<input id="install-submit" type="submit" name="submit" value="{{$submit|escape:'html'}}" />
</form>