diff options
author | Andrew Dolgov <[email protected]> | 2008-05-17 10:22:08 +0100 |
---|---|---|
committer | Andrew Dolgov <[email protected]> | 2008-05-17 10:22:08 +0100 |
commit | 962d8ba4e147e54158b7fa8b446b03636408f103 (patch) | |
tree | 6ee5f66ce838ced078ebdc932649cd0960bf3bd2 | |
parent | 86deaa0eb982d8b7173df12b084e45c0e26ee391 (diff) |
vf_catchup_link: use onclick, instead of href
-rw-r--r-- | functions.php | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/functions.php b/functions.php index d01c31d56..f8d806715 100644 --- a/functions.php +++ b/functions.php @@ -4934,8 +4934,9 @@ $cur_feed_title = $line["feed_title"]; $vgroup_last_feed = $feed_id; + $cur_feed_title = htmlspecialchars($cur_feed_title); - $vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)"; + $vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)"; print "<tr class='feedTitle'><td colspan='7'>". "<a href=\"javascript:viewfeed($feed_id, '', false)\">". @@ -5006,7 +5007,9 @@ $cur_feed_title = $line["feed_title"]; $vgroup_last_feed = $feed_id; - $vf_catchup_link = "(<a href='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\")'>mark as read</a>)"; + $cur_feed_title = htmlspecialchars($cur_feed_title); + + $vf_catchup_link = "(<a onclick='javascript:catchupFeedInGroup($feed_id, \"$cur_feed_title\");' href='#'>mark as read</a>)"; print "<div class='cdmFeedTitle'>". "<a href=\"javascript:viewfeed($feed_id, '', false)\">". |