" . htmlspecialchars($key2) . "\n";
+ $rs .= "" . serendipity_specialchars($key2) . "\n";
$rs .= $this->serializeval($val2);
$rs .= "\n";
}
@@ -1729,7 +1729,7 @@ class XML_RPC_Value extends XML_RPC_Base
$rs .= "<${typ}>" . ($val ? '1' : '0') . "${typ}>";
break;
case $GLOBALS['XML_RPC_String']:
- $rs .= "<${typ}>" . htmlspecialchars($val). "${typ}>";
+ $rs .= "<${typ}>" . serendipity_specialchars($val). "${typ}>";
break;
default:
$rs .= "<${typ}>${val}${typ}>";
diff --git a/include/compat.inc.php b/include/compat.inc.php
index 7f9aabeb..5856a650 100644
--- a/include/compat.inc.php
+++ b/include/compat.inc.php
@@ -282,7 +282,7 @@ if (empty($_SERVER['REQUEST_URI'])) {
// Some security issues
if (isset($serendipity['GET']['searchTerm'])) {
- $serendipity['GET']['searchTerm'] = htmlspecialchars(strip_tags($serendipity['GET']['searchTerm']));
+ $serendipity['GET']['searchTerm'] = serendipity_specialchars(strip_tags($serendipity['GET']['searchTerm']));
}
/**
diff --git a/plugins/serendipity_event_entryproperties/serendipity_event_entryproperties.php b/plugins/serendipity_event_entryproperties/serendipity_event_entryproperties.php
index da55fdf2..ae9fefaa 100644
--- a/plugins/serendipity_event_entryproperties/serendipity_event_entryproperties.php
+++ b/plugins/serendipity_event_entryproperties/serendipity_event_entryproperties.php
@@ -316,7 +316,7 @@ class serendipity_event_entryproperties extends serendipity_event
?>
-
+
-
+
';
@@ -355,7 +355,7 @@ class serendipity_event_entryproperties extends serendipity_event
$users = serendipity_fetchUsers('', 'hidden');
foreach($users AS $user) {
?>
-
+
';
@@ -380,7 +380,7 @@ class serendipity_event_entryproperties extends serendipity_event
}
$avail_users =& $this->getValidAuthors();
foreach($avail_users AS $user) {
- echo '' . "\n";
+ echo '' . "\n";
}
?>
@@ -414,7 +414,7 @@ class serendipity_event_entryproperties extends serendipity_event
$selected = false;
}
- echo '' . "\n";
+ echo '' . "\n";
}
}
?>
@@ -447,7 +447,7 @@ class serendipity_event_entryproperties extends serendipity_event
foreach($fields AS $fieldname) {
$fieldparts = explode(':', $fieldname);
$fieldname = $fieldparts[0];
- $fieldname = htmlspecialchars(trim($fieldname));
+ $fieldname = serendipity_specialchars(trim($fieldname));
if (isset($serendipity['POST']['properties'][$fieldname])) {
$value = $serendipity['POST']['properties'][$fieldname];
@@ -459,7 +459,7 @@ class serendipity_event_entryproperties extends serendipity_event
?>
-
+
';
foreach($entries AS $idx => $entry) {
- printf('' . PLUGIN_EVENT_ENTRYPROPERTIES_CACHE_BUILDING, $entry['id'], htmlspecialchars($entry['title']));
+ printf('' . PLUGIN_EVENT_ENTRYPROPERTIES_CACHE_BUILDING, $entry['id'], serendipity_specialchars($entry['title']));
$this->updateCache($entry);
echo ' ' . PLUGIN_EVENT_ENTRYPROPERTIES_CACHED . '';
}
@@ -620,10 +620,10 @@ class serendipity_event_entryproperties extends serendipity_event
if ($to < $total) {
?>
-
+
';
@@ -1205,7 +1205,7 @@ var $filter_defaults;
echo '
';
echo '
';
} elseif (isset($serendipity['POST']['captcha'])) {
- echo '';
+ echo '';
}
echo '';
}
diff --git a/plugins/serendipity_plugin_authors/serendipity_plugin_authors.php b/plugins/serendipity_plugin_authors/serendipity_plugin_authors.php
index 9ab292ea..c450f942 100644
--- a/plugins/serendipity_plugin_authors/serendipity_plugin_authors.php
+++ b/plugins/serendipity_plugin_authors/serendipity_plugin_authors.php
@@ -107,7 +107,7 @@ class serendipity_plugin_authors extends serendipity_plugin {
if ( !empty($image) ) {
$html .= '
';
}
- $html .= ''. htmlspecialchars($auth['realname']) . $entrycount . '';
+ $html .= ''. serendipity_specialchars($auth['realname']) . $entrycount . '';
$html .= '' . "\n";
}
}
diff --git a/plugins/serendipity_plugin_calendar/serendipity_plugin_calendar.php b/plugins/serendipity_plugin_calendar/serendipity_plugin_calendar.php
index 10d477a8..9cad1e70 100644
--- a/plugins/serendipity_plugin_calendar/serendipity_plugin_calendar.php
+++ b/plugins/serendipity_plugin_calendar/serendipity_plugin_calendar.php
@@ -307,7 +307,7 @@ class serendipity_plugin_calendar extends serendipity_plugin {
$cellProps[$externalevents[$currDay]['Class']] = 1;
}
if (isset($externalevents[$currDay]['Title'])) {
- $cellProps['Title'] = htmlspecialchars($externalevents[$currDay]['Title']);
+ $cellProps['Title'] = serendipity_specialchars($externalevents[$currDay]['Title']);
}
if (isset($externalevents[$currDay]['Extended'])) {
foreach($externalevents[$currDay]['Extended'] as $ext_key => $ext_val) {
diff --git a/plugins/serendipity_plugin_categories/serendipity_plugin_categories.php b/plugins/serendipity_plugin_categories/serendipity_plugin_categories.php
index 01f956e1..176606df 100644
--- a/plugins/serendipity_plugin_categories/serendipity_plugin_categories.php
+++ b/plugins/serendipity_plugin_categories/serendipity_plugin_categories.php
@@ -268,7 +268,7 @@ class serendipity_plugin_categories extends serendipity_plugin {
if ( !empty($image) ) {
$html .= '
';
}
- $html .= ''. htmlspecialchars($categories[$cid]['category_name']) .'';
+ $html .= ''. serendipity_specialchars($categories[$cid]['category_name']) .'';
$html .= '' . "\n";
}
}
diff --git a/plugins/serendipity_plugin_comments/serendipity_plugin_comments.php b/plugins/serendipity_plugin_comments/serendipity_plugin_comments.php
index 0164b741..24a8b605 100644
--- a/plugins/serendipity_plugin_comments/serendipity_plugin_comments.php
+++ b/plugins/serendipity_plugin_comments/serendipity_plugin_comments.php
@@ -213,9 +213,9 @@ class serendipity_plugin_comments extends serendipity_plugin
substr($row['comment_url'], 0, 8) != 'https://') {
$row['comment_url'] = 'http://' . $row['comment_url'];
}
- $user = '' . htmlspecialchars(strip_tags($row['user'])) . '';
+ $user = '' . serendipity_specialchars(strip_tags($row['user'])) . '';
} else {
- $user = htmlspecialchars(strip_tags($row['user']));
+ $user = serendipity_specialchars(strip_tags($row['user']));
}
$user = trim($user);
@@ -256,10 +256,10 @@ class serendipity_plugin_comments extends serendipity_plugin
'',
'' . "\n"
- . '' . "\n"
+ . '' . "\n"
. '' . strip_tags($entry['comment'], '
') . ' ' . "\n\n"
);
}
diff --git a/plugins/serendipity_plugin_history/serendipity_plugin_history.php b/plugins/serendipity_plugin_history/serendipity_plugin_history.php
index 7b6f266d..ce1f61e3 100644
--- a/plugins/serendipity_plugin_history/serendipity_plugin_history.php
+++ b/plugins/serendipity_plugin_history/serendipity_plugin_history.php
@@ -189,7 +189,7 @@ class serendipity_plugin_history extends serendipity_plugin
$t = ($maxlength==0 || strlen($e[$x]['title'])<=$maxlength) ?
$e[$x]['title'] :
(trim(serendipity_mb('substr', $e[$x]['title'], 0, $maxlength-3)).' [...]');
- echo '"' . htmlspecialchars($t) . '"';
+ echo '"' . serendipity_specialchars($t) . '"';
if ($full)
{ echo '' . strip_tags($e[$x]['body']) . '
'; }
}
diff --git a/plugins/serendipity_plugin_recententries/serendipity_plugin_recententries.php b/plugins/serendipity_plugin_recententries/serendipity_plugin_recententries.php
index e01291e9..f1126d1e 100644
--- a/plugins/serendipity_plugin_recententries/serendipity_plugin_recententries.php
+++ b/plugins/serendipity_plugin_recententries/serendipity_plugin_recententries.php
@@ -241,9 +241,9 @@ class serendipity_plugin_recententries extends serendipity_plugin {
$entry['title'] = '#' . $entry['id'];
}
- echo '' . htmlspecialchars($entry['title']) . '' . "\n"
+ echo '' . serendipity_specialchars($entry['title']) . '' . "\n"
. '' . "\n";
}
echo '' . "\n\n";
diff --git a/plugins/serendipity_plugin_remoterss/serendipity_plugin_remoterss.php b/plugins/serendipity_plugin_remoterss/serendipity_plugin_remoterss.php
index 56875ff9..d9c16c62 100644
--- a/plugins/serendipity_plugin_remoterss/serendipity_plugin_remoterss.php
+++ b/plugins/serendipity_plugin_remoterss/serendipity_plugin_remoterss.php
@@ -507,7 +507,7 @@ class serendipity_plugin_remoterss extends serendipity_plugin {
$content .= '