Opened 17 years ago
Closed 16 years ago
#342 closed defect (fixed)
[patch] locale with html escape chars
| Reported by: | alex@… | Owned by: | rjl |
|---|---|---|---|
| Priority: | normal | Milestone: | 1.0.2 |
| Component: | PHP scripts | Version: | 1.0.1 |
| Severity: | major | Keywords: | |
| Cc: |
Description
I've noticed a very nasty bug that append while using button locale text with html escape code like :
>text<
This is true with patched french locale (with full ASCII html patch), when clicking buttons in configuration page, nothing append.
Diving into code, this is caused by the tests mechanism to retrive witch button is pressed :
if ($button == $lang['button_update_address']
but, if $lang[] contain html escpaed chars, test will return false.
So, to solve this issue, there is 2 options :
- use internal variable that doenst use text button
- use htmlentities() to convert $button var
First option is probably the better, but require a lot of work. My proposed patch against 1.0.1 is based on the 2nd option, with the use of htmlentities().
Attachments (1)
Change History (3)
Changed 17 years ago by alex@…
comment:1 Changed 17 years ago by rjl
- Milestone set to 1.0.2
- Version set to 1.0.1
comment:2 Changed 16 years ago by dmorton
- Resolution set to fixed
- Status changed from new to closed
no, your option number one is the right answer, and can be accomplished simply by comparing the name of the variable, and not the value.
Beside the forms listed in this patch, there are some places where there is a input with a name="submit" but there are no more duplicates, so it isn't as critical.
fixed in [1120]
patch