gallery.php Title and description special chars are not escaped on output.

Only on input to database in the insert function.
Fixes ugly escaped text.
This commit is contained in:
Znote 2017-01-07 02:47:20 +01:00
parent ce043006ed
commit ee6841a12e

View File

@ -23,8 +23,8 @@ if ($logged_in === true) {
foreach ($images as $img) { foreach ($images as $img) {
$imageSrc = (string)$img['src']; $imageSrc = (string)$img['src'];
} }
$title = sanitize($_POST['title']); $title = $_POST['title'];
$desc = sanitize($_POST['desc']); $desc = $_POST['desc'];
if ($imageSrc !== false) { if ($imageSrc !== false) {