From: Steve Sutton <steve@gaslightmedia.com>
Date: Thu, 16 Oct 2014 16:42:09 +0000 (-0400)
Subject: for form filters
X-Git-Tag: v1.0.0~17
X-Git-Url: http://cvs2.gaslightmedia.com/gitweb/index.cgi?a=commitdiff_plain;h=4ebd643817f1dce018108ca8b145ef22b8077628;p=WP-Plugins%2Fglm-simple-messageboard.git

for form filters
---

diff --git a/GlmQuickSite.php b/GlmQuickSite.php
index 3c4d0e6..41dd106 100644
--- a/GlmQuickSite.php
+++ b/GlmQuickSite.php
@@ -233,7 +233,8 @@ function glmQuickSiteRenderText($fieldName) {
         $options = get_option( 'glmQuickSite_settings' );
     }
 ?>
-    <input type='text' name='glmQuickSite_settings[<?php echo $fieldName;?>]' value='<?php echo $options[$fieldName]; ?>'>
+    <input type="text" name="glmQuickSite_settings[<?php echo $fieldName;?>]"
+           value="<?php echo strp_replace('"', '&quote;', $options[$fieldName]); ?>">
 <?php
 }
 
@@ -241,7 +242,7 @@ function glmQuickSiteRenderTextArea($fieldName) {
     static $options;
     $options = get_option( 'glmQuickSite_settings' );
 ?>
-    <textarea cols='40' rows='5' name='glmQuickSite_settings[<?php echo $fieldName;?>]'><?php echo $options[$fieldName]; ?></textarea>
+    <textarea cols="40" rows="5" name="glmQuickSite_settings[<?php echo $fieldName;?>]"><?php echo htmlspecialchars($options[$fieldName]); ?></textarea>
 <?php
 }