diff options
| author |   terry%mozilla.org <> | 1999-10-20 04:27:40 +0000 |
|---|---|---|
| committer | terry%mozilla.org <> | 1999-10-20 04:27:40 +0000 |
| commit | d45b54f93429cb6942795db791f3c203df720124 (patch) | |
| tree | 34f91797576bf1a46569d1b0b930207c3deebe67 /editversions.cgi | |
| parent | align "edit products" at the top so its not lost 3 screens down in the produc... (diff) | |
| download | bugzilla-d45b54f93429cb6942795db791f3c203df720124.tar.gz bugzilla-d45b54f93429cb6942795db791f3c203df720124.tar.bz2 bugzilla-d45b54f93429cb6942795db791f3c203df720124.zip | |
Need to value_quote() things that go into VALUE attributes in HTML.
Diffstat (limited to 'editversions.cgi')
| -rwxr-xr-x | editversions.cgi | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/editversions.cgi b/editversions.cgi index 7ac8032b2..09196d2f8 100755 --- a/editversions.cgi +++ b/editversions.cgi @@ -100,8 +100,10 @@ sub EmitFormElements ($$) my ($product, $version) = @_; print " <TH ALIGN=\"right\">Version:</TH>\n"; - print " <TD><INPUT SIZE=64 MAXLENGTH=64 NAME=\"version\" VALUE=\"$version\">\n"; - print " <INPUT TYPE=HIDDEN NAME=\"product\" VALUE=\"$product\"></TD>\n"; + print " <TD><INPUT SIZE=64 MAXLENGTH=64 NAME=\"version\" VALUE=\"" . + value_quote($version) . "\">\n"; + print " <INPUT TYPE=HIDDEN NAME=\"product\" VALUE=\"" . + value_quote($product) . "\"></TD>\n"; } @@ -383,8 +385,10 @@ one."; print "<FORM METHOD=POST ACTION=editversions.cgi>\n"; print "<INPUT TYPE=SUBMIT VALUE=\"Yes, delete\">\n"; print "<INPUT TYPE=HIDDEN NAME=\"action\" VALUE=\"delete\">\n"; - print "<INPUT TYPE=HIDDEN NAME=\"product\" VALUE=\"$product\">\n"; - print "<INPUT TYPE=HIDDEN NAME=\"version\" VALUE=\"$version\">\n"; + print "<INPUT TYPE=HIDDEN NAME=\"product\" VALUE=\"" . + value_quote($product) . "\">\n"; + print "<INPUT TYPE=HIDDEN NAME=\"version\" VALUE=\"" . + value_quote($version) . "\">\n"; print "</FORM>"; PutTrailer($localtrailer); @@ -467,7 +471,8 @@ if ($action eq 'edit') { print "</TR></TABLE>\n"; - print "<INPUT TYPE=HIDDEN NAME=\"versionold\" VALUE=\"$version\">\n"; + print "<INPUT TYPE=HIDDEN NAME=\"versionold\" VALUE=\"" . + value_quote($version) . "\">\n"; print "<INPUT TYPE=HIDDEN NAME=\"action\" VALUE=\"update\">\n"; print "<INPUT TYPE=SUBMIT VALUE=\"Update\">\n"; |