From 02ad6d19fe4d9f59076ffeeeae6b28f6a7fcf925 Mon Sep 17 00:00:00 2001 From: Denis Flaven Date: Tue, 15 Nov 2011 13:12:22 +0000 Subject: [PATCH] Prevent Javascript errors in case a name contains a quote. SVN:1.2[1670] --- pages/UI.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pages/UI.php b/pages/UI.php index d576ac92f..ac1f5a1fa 100644 --- a/pages/UI.php +++ b/pages/UI.php @@ -936,6 +936,7 @@ try } } $sTip .= "

"; + $sTip = addslashes($sTip); $sReadyScript .= "$('#multi_values_$sAttCode').qtip( { content: '$sTip', show: 'mouseover', hide: 'mouseout', style: { name: 'dark', tip: 'leftTop' }, position: { corner: { target: 'rightMiddle', tooltip: 'leftTop' }} } );"; $oDummyObj->Set($sAttCode, null); @@ -1587,6 +1588,7 @@ EOF } } $sTip .= "

"; + $sTip = addslashes($sTip); $sReadyScript .= "$('#multi_values_$sAttCode').qtip( { content: '$sTip', show: 'mouseover', hide: 'mouseout', style: { name: 'dark', tip: 'leftTop' }, position: { corner: { target: 'rightMiddle', tooltip: 'leftTop' }} } );\n"; $sComments .= '
'.count($aValues[$sAttCode]).'
'; }