diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/backend-rpc.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/backend-rpc.php b/modules/backend-rpc.php index 5a8452ea4..d7ebb5940 100644 --- a/modules/backend-rpc.php +++ b/modules/backend-rpc.php @@ -279,7 +279,7 @@ WHERE id = '$id' AND id = ref_id AND owner_uid = '".$_SESSION['uid']."'"); if (db_num_rows($result) == 1) { - $link = strip_tags(db_fetch_result($result, 0, "link")); + $link = htmlspecialchars(strip_tags(db_fetch_result($result, 0, "link"))); print "<rpc-reply><link>$link</link><id>$id</id></rpc-reply>"; } else { print "<rpc-reply><error>Article not found</error></rpc-reply>"; |