diff options
author | Benny Baumann <BenBE@geshi.org> | 2013-03-13 09:08:42 +0100 |
---|---|---|
committer | Benny Baumann <BenBE@geshi.org> | 2013-03-13 09:08:42 +0100 |
commit | e876e93e5941e295807c311a990775a2188d4d4a (patch) | |
tree | 8ebfa95d3c7a9e649c913029991fa68e9faea3ee /pages/account | |
parent | 47f72a7ca006dd9efff645545e58a391e64468a6 (diff) | |
download | cacert-devel-e876e93e5941e295807c311a990775a2188d4d4a.tar.gz cacert-devel-e876e93e5941e295807c311a990775a2188d4d4a.tar.xz cacert-devel-e876e93e5941e295807c311a990775a2188d4d4a.zip |
bug 1124: Sanatize properly and make code look better
Diffstat (limited to 'pages/account')
-rw-r--r-- | pages/account/41.php | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/pages/account/41.php b/pages/account/41.php index aac45dd..148944a 100644 --- a/pages/account/41.php +++ b/pages/account/41.php @@ -73,8 +73,12 @@ require_once($_SESSION['_config']['filepath'].'/includes/lib/l10n.php'); $res = mysql_query($query); while($row = mysql_fetch_assoc($res)) { - echo "<option value='".sanitizeHTML($row['locale'])."'"; - echo ">[".$row['locale']."] ".$row['lang']." - (".$row['country'].")</option>\n"; + printf("<option value=\"%s\">[%s] %s (%s)</option>\n", + sanitizeHTML($row['locale']), + sanitizeHTML($row['locale']), + sanitizeHTML($row['lang']), + sanitizeHTML($row['country']) + ); } ?> </select> |