diff options
author | Dries Buytaert <dries@buytaert.net> | 2004-01-04 21:54:13 +0000 |
---|---|---|
committer | Dries Buytaert <dries@buytaert.net> | 2004-01-04 21:54:13 +0000 |
commit | 3176e66905f2c6da3361b6a8cf1a5a0af7f2aada (patch) | |
tree | bee7ed396a1c90cd0a2661ce6c5aa5f9dd6df471 /modules/poll/poll.module | |
parent | 51ee09cc2e45b27b9854bc297f970ed64cf13edc (diff) | |
download | brdo-3176e66905f2c6da3361b6a8cf1a5a0af7f2aada.tar.gz brdo-3176e66905f2c6da3361b6a8cf1a5a0af7f2aada.tar.bz2 |
- Patch 4948 by Goba: the poll module uses check_output() on the poll options.
Diffstat (limited to 'modules/poll/poll.module')
-rw-r--r-- | modules/poll/poll.module | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/modules/poll/poll.module b/modules/poll/poll.module index 8f1710223..ac1b798ba 100644 --- a/modules/poll/poll.module +++ b/modules/poll/poll.module @@ -286,7 +286,7 @@ function poll_view_voting(&$node, $main, $block, $links) { if ($node->choice) { foreach ($node->choice as $key => $value) { if ($value != "") { - $output .= "<div><input type=\"radio\" name=\"pollvote[$node->nid]\" value=\"$key\" />". check_output($value) ."</div>"; + $output .= "<div><input type=\"radio\" name=\"pollvote[$node->nid]\" value=\"$key\" />". drupal_specialchars($value) ."</div>"; } } } @@ -317,7 +317,7 @@ function poll_view_results(&$node, $main, $block, $links) { if ($value != "") { $width = round($node->chvotes[$key] * 100 / max($votestotal, 1)); $percentage = round($node->chvotes[$key] * 100 / max($votestotal, 1)); - $output .= "<div class=\"text\">". check_output($value) ."</div>"; + $output .= "<div class=\"text\">". drupal_specialchars($value) ."</div>"; $output .= "<div class=\"bar\">"; $output .= "<div style=\"width: ". $width ."%;\" class=\"foreground\"></div>"; $output .= "<div style=\"width: ". (100 - $width) ."%;\" class=\"background\"></div>"; |