Don’t overwrite var, escape while echoing.
1.1 --- a/viewer.php Fri Feb 12 23:32:23 2010 +0100
1.2 +++ b/viewer.php Fri Feb 12 23:32:56 2010 +0100
1.3 @@ -42,11 +42,10 @@
1.4
1.5 if (file_exists($file)) {
1.6 $filecont = file_get_contents($file);
1.7 - $filecont = htmlspecialchars($filecont, ENT_NOQUOTES);
1.8
1.9 echo '<h1>' . basename($file) . "</h1>\n\n";
1.10 echo '<pre style="white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: pre-wrap; word-wrap: break-word;">';
1.11 - echo $filecont;
1.12 + echo htmlspecialchars($filecont, ENT_NOQUOTES);
1.13 echo '</pre>';
1.14 } else {
1.15 echo '<p><b>Error:</b> File not found.</p>';