- added translation of special HTML characters in history of

 alerts and alarms (Alexei)


git-svn-id: svn://svn.zabbix.com/trunk@976 97f52cf1-0a1b-0410-bd0e-c28be96e8082

1 files changed, 3 insertions, 3 deletions

diff --git a/frontends/php/alerts.php b/frontends/php/alerts.php
index baf44acf..735d7b14 100644
--- a/frontends/php/alerts.php
+++ b/frontends/php/alerts.php
@@ -112,10 +112,10 @@
 		{
 			echo "<TD><font color=\"AA0000\">not sent</font></TD>";
 		}
-		echo "<TD>".$row["sendto"]."</TD>";
-		echo "<TD><pre>".$row["subject"]."</pre></TD>";
+		echo "<TD>".htmlspecialchars($row["sendto"])."</TD>";
+		echo "<TD><pre>".htmlspecialchars($row["subject"])."</pre></TD>";
 		echo "<TD>";
-		echo "<pre>".$row["message"]."</pre>";;
+		echo "<pre>".htmlspecialchars($row["message"])."</pre>";;
 //		for($i=0;$i<strlen($row["message"]);$i++)
 //		{
 //			if($row["message"][$i]=="\n")