Don’t overwrite var, escape while echoing.
authorLaurens Holst <laurens.hg@grauw.nl>
Fri, 12 Feb 2010 23:32:56 +0100
changeset 44f44bb2d8b018
parent 43 e1baa3f8048f
child 45 6f8430ef19f3
Don’t overwrite var, escape while echoing.
viewer.php
     1.1 --- a/viewer.php	Fri Feb 12 23:32:23 2010 +0100
     1.2 +++ b/viewer.php	Fri Feb 12 23:32:56 2010 +0100
     1.3 @@ -42,11 +42,10 @@
     1.4  		
     1.5  	if (file_exists($file)) {
     1.6  	    $filecont = file_get_contents($file);
     1.7 -	    $filecont = htmlspecialchars($filecont, ENT_NOQUOTES);
     1.8  
     1.9  	    echo '<h1>' . basename($file) . "</h1>\n\n";
    1.10  	    echo '<pre style="white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: pre-wrap; word-wrap: break-word;">';
    1.11 -	    echo $filecont;
    1.12 +	    echo htmlspecialchars($filecont, ENT_NOQUOTES);
    1.13  	    echo '</pre>';
    1.14  	} else {
    1.15  	    echo '<p><b>Error:</b> File not found.</p>';