[Vtigercrm-commits] [vtiger-commits] r10270 - /vtigercrm/branches/5.0.3/modules/CustomView/Save.php

[vtigercrm-commits at vtiger.fosslabs.com]

Author: saraj
Date: Wed Feb 28 05:15:16 2007
New Revision: 10270

Log:
fix for special characters in custom view. Fixes 3119

Modified:
    vtigercrm/branches/5.0.3/modules/CustomView/Save.php

Modified: vtigercrm/branches/5.0.3/modules/CustomView/Save.php
==============================================================================
--- vtigercrm/branches/5.0.3/modules/CustomView/Save.php (original)
+++ vtigercrm/branches/5.0.3/modules/CustomView/Save.php Wed Feb 28 05:15:16 2007
@@ -19,7 +19,7 @@
 $return_action = $_REQUEST["return_action"];
 if($cvmodule != "")
 {
-	$viewname = $_REQUEST["viewName"];
+	$viewname = htmlentities($_REQUEST["viewName"]);
 	if(isset($_REQUEST["setDefault"]))
 	{
 	  $setdefault = 1;
@@ -83,7 +83,7 @@
    	   $string = substr($allKeys[$i], 0, 4);
 	   if($string == "fval")
    	   {
-		   $adv_filter_value[] = $_REQUEST[$allKeys[$i]];
+		   $adv_filter_value[] = htmlentities($_REQUEST[$allKeys[$i]]);
    	   }
 	}
 	//<<<<<<<advancedfilter>>>>>>>>