Changeset 595

Timestamp:

12/09/2003 05:16:28 PM (23 years ago)

Author:

alex_t_king

Message:

added htmlspecialchars to outputing comment author name, added 'Anonymous' as a default if no name provided

File:

• trunk/b2-include/b2template.functions.php (modified) (3 diffs)

trunk/b2-include/b2template.functions.php

@@ -1497 +1497 @@
 function comment_author() {
         global $comment;
-        echo stripslashes($comment->comment_author);
+        if (!empty($comment->comment_author)) {
+                echo htmlspecialchars(stripslashes($comment->comment_author));
+        }
+        else {
+                echo "Anonymous";
+        }
 }
 
@@ -1509 +1514 @@
         $url = trim(stripslashes($comment->comment_author_url));
         $email = stripslashes($comment->comment_author_email);
-        $author = stripslashes($comment->comment_author);
+        $author = htmlspecialchars(stripslashes($comment->comment_author));
+        if (empty($author)) {
+                $author = "Anonymous";
+        }
 
         $url = str_replace('http://url', '', $url);
@@ -1620 +1628 @@
 function comment_author_rss() {
         global $comment;
-        echo strip_tags(stripslashes($comment->comment_author));
+        if (!empty($comment->comment_author)) {
+                echo htmlspecialchars(strip_tags(stripslashes($comment->comment_author)));
+        }
+        else {
+                echo "Anonymous";
+        }
 }