summaryrefslogtreecommitdiffstats
path: root/usr/local/www/firewall_rules.php
diff options
context:
space:
mode:
authorsullrich <sullrich@pfsense.org>2009-11-27 19:39:47 -0500
committersullrich <sullrich@pfsense.org>2009-11-27 19:40:06 -0500
commitd2aa8cd682a6db5a4d081ea39ff430df8715e9a0 (patch)
treee02f54e391c3347163d55aedcfd2e18689968900 /usr/local/www/firewall_rules.php
parent55c613269b23e74bd67119d9f24d4305354d8dff (diff)
downloadpfsense-d2aa8cd682a6db5a4d081ea39ff430df8715e9a0.zip
pfsense-d2aa8cd682a6db5a4d081ea39ff430df8715e9a0.tar.gz
Escape ' Ticket #143
Diffstat (limited to 'usr/local/www/firewall_rules.php')
-rwxr-xr-xusr/local/www/firewall_rules.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/usr/local/www/firewall_rules.php b/usr/local/www/firewall_rules.php
index 902dd26..bcfa435 100755
--- a/usr/local/www/firewall_rules.php
+++ b/usr/local/www/firewall_rules.php
@@ -414,7 +414,7 @@ echo "<script type=\"text/javascript\" language=\"javascript\" src=\"/javascript
$a_schedules = &$config['schedules']['schedule'];
$schedule_span_begin = "";
$schedule_span_end = "";
- $sched_caption = "";
+ $sched_caption_escaped = "";
$sched_content = "";
$schedstatus = false;
$dayArray = array ('Mon','Tues','Wed','Thur','Fri','Sat','Sun');
@@ -514,8 +514,8 @@ echo "<script type=\"text/javascript\" language=\"javascript\" src=\"/javascript
$sched_content .= $dayFriendly . "; " . $timeFriendly . "<br>";
}
}
- $sched_caption = $schedule['descr'];
- $schedule_span_begin = "<span style=\"cursor: help;\" onmouseover=\"domTT_activate(this, event, 'content', '<h1>$sched_caption</h1><p>$sched_content</p>', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\" onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\"><U>";
+ $sched_caption_escaped = str_replace("'", "\'", $schedule['descr']);
+ $schedule_span_begin = "<span style=\"cursor: help;\" onmouseover=\"domTT_activate(this, event, 'content', '<h1>{$sched_caption_escaped}</h1><p>{$sched_content}</p>', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\" onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\"><U>";
$schedule_span_end = "</U></span>";
}
}
OpenPOWER on IntegriCloud