diff --git a/acp/core/functions.php b/acp/core/functions.php index 25566bc1..56c6a6f4 100644 --- a/acp/core/functions.php +++ b/acp/core/functions.php @@ -386,13 +386,14 @@ function fc_return_clean_value($string) { } function fc_clean_permalink($str) { - + $str = stripslashes($str); + $str = strip_tags($str); $str = strtolower($str); - $a = array('ä','ö','ü','ß',' + ','//','(',')',';','\'','\\'); - $b = array('ae','oe','ue','ss','-'.'/','','','','',''); + $a = array('ä','ö','ü','ß',' + ','//','(',')',';','\'','\\','.','`','<','>'); + $b = array('ae','oe','ue','ss','-'.'/','','','','','','','','',''); $str = str_replace($a, $b, $str); $str = preg_replace('/\s/s', '_', $str); // replace blanks -> '_' - $string = htmlentities($string); + $str = htmlentities($str, ENT_QUOTES, "UTF-8"); $str = trim($str); return $str;