From a7316a1135b48084b652f0091b38a1f32e0793da Mon Sep 17 00:00:00 2001 From: Andrew McMillan Date: Thu, 18 Feb 2010 23:41:16 +1300 Subject: [PATCH] Use htmlspecialchars rather than htmlentities. --- htdocs/tools.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/tools.php b/htdocs/tools.php index 9fda9d01..3f04f920 100644 --- a/htdocs/tools.php +++ b/htdocs/tools.php @@ -106,7 +106,7 @@ class Tools { } $dir = $_POST["directory_path"]; if(!is_readable($dir)){ - $c->messages[] = sprintf(i18n('directory %s is not readable'),htmlentities($dir)); + $c->messages[] = sprintf(i18n('directory %s is not readable'),htmlspecialchars($dir)); dbg_error_log( "importFromDirectory", "directory is not readable"); return ; }