Changeset 600 for trunk/calendar_new/inc/class.uicalendar.inc.php

Timestamp:

01/13/09 18:30:30 (15 years ago)

Author:

niltonneto

Message:

Implementações do desenvolvedor: amuller@…

File:

• trunk/calendar_new/inc/class.uicalendar.inc.php (modified) (4 diffs)

trunk/calendar_new/inc/class.uicalendar.inc.php

@@ -93 +93 @@
 
                 // Printing results in XML
-                for($i = $this->workdaystarts; $i <= $this->workdayends; $i = $i + 0.5){
+                for($i = $this->workdaystarts; $i <= $this->workdayends; $i = $i + 0.5)
+                {
                         if($i == intval($i))
                                 $retorno.= "<workday><timeid>".($i < 10 ? "0" : "").intval($i)."00</timeid><hour>".($i < 10 ? "0" : "").intval($i).":00</hour>";
@@ -105 +106 @@
                                         $retorno .= "<calEvent>";
                                         $retorno .= "<id>".$line['cal_id']."</id>";
-                                        $retorno .= "<title>".$line['title']."</title>";
-                                        $retorno .= "<description>".$line['description']."</description>";
+                                        $retorno .= "<title>".htmlspecialchars($line['title'])."</title>";
+                                        $retorno .= "<description>".htmlspecialchars($line['description'])."</description>";
                                         $retorno .= "<edatetime>".($line['edatetime']*1000)."</edatetime>";
                                         $retorno .= "<datetime>".($line['datetime']*1000)."</datetime>";       
@@ -141 +142 @@
                                         $retorno .= "<calEvent>";
                                         $retorno .= "<id>".$line['cal_id']."</id>";
-                                        $retorno .= "<title>".$line['title']."</title>";
-                                        $retorno .= "<description>".$line['description']."</description>";
+                                        $retorno .= "<title>".htmlspecialchars($line['title'])."</title>";
+                                        $retorno .= "<description>".htmlspecialchars($line['description'])."</description>";
                                         $retorno .= "<edatetime>".($line['edatetime']*1000)."</edatetime>";
                                         $retorno .= "<datetime>".($line['datetime']*1000)."</datetime>";
@@ -192 +193 @@
                                 $retorno .= "<calEvent>";
                                 $retorno .= "<id>".$line['cal_id']."</id>";
-                                $retorno .= "<title>".$line['title']."</title>";
+                                $retorno .= "<title>".htmlspecialchars($line['title'])."</title>";
                                 $retorno .= "<edatetime>".($line['edatetime']*1000)."</edatetime>";
                                 $retorno .= "<datetime>".($line['datetime']*1000)."</datetime>";