From 93e4f14c855d3fe4c4e9cc5c7d6a58fb2e25fe99 Mon Sep 17 00:00:00 2001
From: Tim Almdal <tnalmdal@shaw.ca>
Date: Thu, 25 Jun 2009 19:04:45 -0700
Subject: 1) Fix potential XSS in digibug_album.html.php 2) Fix case of text

---
 modules/digibug/views/admin_digibug.html.php | 2 +-
 modules/digibug/views/digibug_album.html.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

(limited to 'modules')

diff --git a/modules/digibug/views/admin_digibug.html.php b/modules/digibug/views/admin_digibug.html.php
index 205d8b7a..28d280fd 100644
--- a/modules/digibug/views/admin_digibug.html.php
+++ b/modules/digibug/views/admin_digibug.html.php
@@ -34,7 +34,7 @@
         <?= t("Digibug Advanced allows you to set your own price for photos and gifts. Simply provide your account information.") ?>
       </div>
       <div style="width: 120px;" class="gDigibugText gDigibugSignIn">
-        <?= t("New to Digibug ADVANCED?") ?>
+        <?= t("New to Digibug Advanced?") ?>
         <br/> <br/>
         <a href="http://www.digibug.com/signup.php" style=""><?= t("Sign up") ?></a><?= t(" to get started") ?>
       </div>
diff --git a/modules/digibug/views/digibug_album.html.php b/modules/digibug/views/digibug_album.html.php
index c3337324..2d9cf641 100644
--- a/modules/digibug/views/digibug_album.html.php
+++ b/modules/digibug/views/digibug_album.html.php
@@ -2,7 +2,7 @@
 <div class="gDigibugPrintButton">
   <a class="gButtonLink ui-corner-all ui-state-default ui-icon-left"
      href="<?= url::site("digibug/print_photo/$id?csrf={$csrf}") ?>"
-     title="<?= $title ?>">
+     title="<?= p::clean($title) ?>">
     <span class="ui-icon ui-icon-print"><?= $title ?></span>
   </a>
 </div>
\ No newline at end of file
-- 
cgit v1.2.3