fix: added missing conversion to HTML entities

thorsten · Feb 14, 2023 · f3380f4 · f3380f4
1 parent db77df8
commit f3380f4
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/phpmyfaq/admin/record.comments.php b/phpmyfaq/admin/record.comments.php
@@ -127,10 +127,10 @@
                 <td>
                 <span style="font-weight: bold;">
                     <a href="mailto:<?= $newsComment->getEmail() ?>">
-                        <?= $newsComment->getUsername() ?>
+                        <?= Strings::htmlentities($newsComment->getUsername()) ?>
                     </a> |
-                    <?= $date->format(date('Y-m-d H:i', $faqComment->getDate())) ?> |
-                    <a href="<?php printf('../?action=news&id=%d&artlang=%s', $faqComment->getRecordId(), $faqLangCode) ?>">
+                    <?= $date->format(date('Y-m-d H:i', $newsComment->getDate())) ?> |
+                    <a href="<?php printf('../?action=news&id=%d&artlang=%s', $newsComment->getRecordId(), $faqLangCode) ?>">
                         <i class="fa fa-newspaper-o" aria-hidden="true"></i>
                     </a>
                 </span><br/>