Update the form output for double quotes.
authorSteve Sutton <steve@gaslightmedia.com>
Tue, 14 Aug 2018 12:31:58 +0000 (08:31 -0400)
committerSteve Sutton <steve@gaslightmedia.com>
Tue, 14 Aug 2018 12:31:58 +0000 (08:31 -0400)
using htmlspecialchars to keep value correct.

classes/class_form_creator.inc

index 2fdab0c..ba56d69 100755 (executable)
@@ -295,7 +295,7 @@ class form_creator extends GLM_TOOLBOX {
        {
                $fObject = $this->get_vals( $type_data );
                $col1 = $fObject->req1.$fObject->title.$fObject->req2;
-               $col2 = '<input type="text" id="'.$fObject->name.'" name="'.$fObject->name.'" value="'.$fObject->value.'"'.$fObject->reqval.'>';
+               $col2 = '<input type="text" id="'.$fObject->name.'" name="'.$fObject->name.'" value="'.htmlspecialchars($fObject->value).'"'.$fObject->reqval.'>';
                $out = $this->create_row( $col1, $col2 );
                return( $out );
        }