Sanitize the 'user' before output.

git-svn-id: https://svn.sourceforge.jp/svnroot/nucleus-jp/nucleus-jp/trunk@1158 1ca29b6e-896d-4ea0-84a5-967f57386b96

diff --git a/utf8/nucleus/libs/COMMENTACTIONS.php b/utf8/nucleus/libs/COMMENTACTIONS.php
index f737be6..5e69eed 100644 (file)
--- a/utf8/nucleus/libs/COMMENTACTIONS.php
+++ b/utf8/nucleus/libs/COMMENTACTIONS.php
@@ -358,7 +358,7 @@ class COMMENTACTIONS extends BaseActions {
                        $member =& $manager->getMember($this->currentComment['memberid']);
                        echo $member->getRealName();
                } else {
-                       echo $this->currentComment['user'];
+                       echo htmlspecialchars($this->currentComment['user'],ENT_QUOTES);
                }
        }