< & > supported?

[markus_petrux]

I believe I've found the problem. Could you please try this?

OPEN: admin/admin_easymod.php

FIND:

Code: Select all

$hidden_sql = '<input type="hidden" name="SQL' . $steps . '" value="' . htmlspecialchars($formatted_sql[$i]) . '" />';

REPLACE WITH:

Code: Select all

$hidden_sql = '<input type="hidden" name="SQL' . $steps . '" value="' . $formatted_sql[$i] . '" />';

Note the line before this one already applied htmlspecialchars to the SQL line.

[-=ET=-]

Well done!
Everything is solved for <, > and "!

Even if you don't release any new version, perhaps you should publish this fix in this topic?
viewtopic.php?f=17&t=21309

[markus_petrux]

Looks like a good idea:
viewtopic.php?f=17&t=21309&p=130605#130605


Thanks again