From 5154c3aca4c9362cbd0fb236e0ea9dd5c7c0aa78 Mon Sep 17 00:00:00 2001
From: Steven Wittens <steven@10.no-reply.drupal.org>
Date: Wed, 18 May 2005 21:12:17 +0000
Subject: - Fixing some plain/url check calls.

---
 modules/drupal/drupal.module | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'modules/drupal/drupal.module')

diff --git a/modules/drupal/drupal.module b/modules/drupal/drupal.module
index 8295d8778..143ee798a 100644
--- a/modules/drupal/drupal.module
+++ b/modules/drupal/drupal.module
@@ -114,8 +114,10 @@ function drupal_directory_ping($arguments) {
 function drupal_directory_page($sort = 'name') {
   $result = db_query('SELECT * FROM {directory} ORDER BY '. $sort);
 
+  // Note: All fields except the mission are treated as plain-text.
+  // The mission is stripped of any HTML tags to keep the output simple and consistent.
   while ($site = db_fetch_object($result)) {
-    $output .= "<a href=\"$site->link\">$site->name</a> - $site->slogan<div style=\"padding-left: 20px;\">$site->mission</div><br />";
+    $output .= '<a href="'. check_url($site->link) .'">'. check_plain($site->name) .'</a> - '. check_plain($site->slogan) .'<div style="padding-left: 20px;">'. strip_tags($site->mission) .'</div><br />';
   }
 
   return $output;
-- 
cgit v1.2.3