Changeset 1342 for branches/0.8/bb-admin/admin-functions.php

Timestamp:

03/19/2008 11:27:40 PM (18 years ago)

Author:

mdawaffe

Message:

markup fix from da3rX. Fixes #831

File:

• branches/0.8/bb-admin/admin-functions.php (modified) (1 diff)

branches/0.8/bb-admin/admin-functions.php

@@ -212 +212 @@
     $actions = '';
     if ( bb_current_user_can( 'edit_user', $user_id ) )
-        $actions .= "<a href='" . get_profile_tab_link( $user->ID, 'edit' ) . "'>" . __('Edit') . "</a>";
+        $actions .= "<a href='" . attribute_escape( get_profile_tab_link( $user->ID, 'edit' ) ) . "'>" . __('Edit') . "</a>";
     $r .= "\t\t<td>$actions</td>\n\t</tr>";
     return $r;