[Fmsystem-commits] [11046] API: add htmlspecialchars_decode to stripslash from db result

[Sigurd Nes]

Revision: 11046
          http://svn.sv.gnu.org/viewvc/?view=rev&root=fmsystem&revision=11046
Author:   sigurdne
Date:     2013-04-10 08:26:47 +0000 (Wed, 10 Apr 2013)
Log Message:
-----------
API: add htmlspecialchars_decode to stripslash from db result

Modified Paths:
--------------
    trunk/phpgwapi/inc/class.db_adodb.inc.php
    trunk/phpgwapi/inc/class.db_pdo.inc.php

Modified: trunk/phpgwapi/inc/class.db_adodb.inc.php
===================================================================
--- trunk/phpgwapi/inc/class.db_adodb.inc.php   2013-04-10 07:16:43 UTC (rev 
11045)
+++ trunk/phpgwapi/inc/class.db_adodb.inc.php   2013-04-10 08:26:47 UTC (rev 
11046)
@@ -568,7 +568,7 @@
                                {
                                        if ($strip_slashes || 
($this->auto_stripslashes && ! $strip_slashes))
                                        {
-                                               return 
stripslashes($this->resultSet->fields[$name]);
+                                               return 
htmlspecialchars_decode(stripslashes($this->resultSet->fields[$name]));
                                        }
                                        else
                                        {

Modified: trunk/phpgwapi/inc/class.db_pdo.inc.php
===================================================================
--- trunk/phpgwapi/inc/class.db_pdo.inc.php     2013-04-10 07:16:43 UTC (rev 
11045)
+++ trunk/phpgwapi/inc/class.db_pdo.inc.php     2013-04-10 08:26:47 UTC (rev 
11046)
@@ -810,7 +810,7 @@
                                {
                                        if ($strip_slashes || 
($this->auto_stripslashes && ! $strip_slashes))
                                        {
-                                               return 
stripslashes($this->Record[$name]);
+                                               return 
htmlspecialchars_decode(stripslashes($this->Record[$name]));
                                        }
                                        else
                                        {