diff options
| author | thomascube <thomas@roundcube.net> | 2006-12-20 14:06:33 +0000 |
|---|---|---|
| committer | thomascube <thomas@roundcube.net> | 2006-12-20 14:06:33 +0000 |
| commit | 2bca6e1da0e46f93297a7f60ff449b6c6ebac239 (patch) | |
| tree | 7bdec5b01b6a4c150e99716f7cb3f3ed7d55c1a5 /program/steps/mail/upload.inc | |
| parent | cfdf044df284d294e0e73efb10ebce1052264694 (diff) | |
New (strict) quoting for all kind of strings
Diffstat (limited to 'program/steps/mail/upload.inc')
| -rw-r--r-- | program/steps/mail/upload.inc | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/program/steps/mail/upload.inc b/program/steps/mail/upload.inc index cde4ed2d4..50a6dba36 100644 --- a/program/steps/mail/upload.inc +++ b/program/steps/mail/upload.inc @@ -49,16 +49,16 @@ foreach ($_FILES['_attachments']['tmp_name'] as $i => $filepath) if (is_file($CONFIG['skin_path'] . '/images/icons/remove-attachment.png')) $button = sprintf('<img src="%s/images/icons/remove-attachment.png" alt="%s" border="0" style="padding-right:2px;vertical-align:middle" />', $CONFIG['skin_path'], - rcube_label('delete')); + Q(rcube_label('delete'))); else - $button = rcube_label('delete'); + $button = Q(rcube_label('delete')); $content = sprintf('<a href="#delete" onclick="return %s.command(\\\'remove-attachment\\\', \\\'rcmfile%d\\\', this)" title="%s">%s</a>%s', $JS_OBJECT_NAME, $id, - rcube_label('delete'), - $button, - rep_specialchars_output($_FILES['_attachments']['name'][$i], 'js')); + JQ(Q(rcube_label('delete'))), + JQ($button), + JQ(Q($_FILES['_attachments']['name'][$i]))); $response .= sprintf('parent.%s.add2attachment_list(\'rcmfile%d\',\'%s\');', $JS_OBJECT_NAME, |