htmlsc(): Just sugar for htmlspecialchars(), and a foundation

[pukiwiki/pukiwiki.git] / plugin / pcomment.inc.php

diff --git a/plugin/pcomment.inc.php b/plugin/pcomment.inc.php
index 96518c8..e826f04 100644 (file)
--- a/plugin/pcomment.inc.php
+++ b/plugin/pcomment.inc.php
@@ -1,6 +1,6 @@
 <?php
 // PukiWiki - Yet another WikiWikiWeb clone
-// $Id: pcomment.inc.php,v 1.43 2005/10/04 14:31:22 henoheno Exp $
+// $Id: pcomment.inc.php,v 1.48 2011/01/25 15:01:01 henoheno Exp $
 //
 // pcomment plugin - Show/Insert comments into specified (another) page
 //
@@ -91,7 +91,7 @@ function plugin_pcomment_convert()
 
        $_page = get_fullname(strip_bracket($page), $vars_page);
        if (!is_pagename($_page))
-               return sprintf($_pcmt_messages['err_pagename'], htmlspecialchars($_page));
+               return sprintf($_pcmt_messages['err_pagename'], htmlsc($_page));
 
        $dir = PLUGIN_PCOMMENT_DIRECTION_DEFAULT;
        if ($params['below']) {
@@ -119,10 +119,10 @@ function plugin_pcomment_convert()
                        '<input type="radio" name="reply" value="0" tabindex="0" checked="checked" />' : '';
                $comment = '<input type="text" name="msg" size="' . PLUGIN_PCOMMENT_SIZE_MSG . '" />';
 
-               $s_page   = htmlspecialchars($page);
-               $s_refer  = htmlspecialchars($vars_page);
-               $s_nodate = htmlspecialchars($params['nodate']);
-               $s_count  = htmlspecialchars($count);
+               $s_page   = htmlsc($page);
+               $s_refer  = htmlsc($vars_page);
+               $s_nodate = htmlsc($params['nodate']);
+               $s_count  = htmlsc($count);
 
                $form_start = '<form action="' . get_script_uri() . '" method="post">' . "\n";
                $form = <<<EOD
@@ -207,7 +207,7 @@ function plugin_pcomment_insert()
        $msg = rtrim($msg);
 
        if (! is_page($page)) {
-               $postdata = '[[' . htmlspecialchars(strip_bracket($refer)) . ']]' . "\n\n" .
+               $postdata = '[[' . htmlsc(strip_bracket($refer)) . ']]' . "\n\n" .
                        '-' . $msg . "\n";
        } else {
                $postdata = get_source($page);