mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-22 17:02:03 +02:00
Code Issues Projects Releases Wiki Activity

MDL-18212 - switch to addslashes_js - thanks Tim.

Browse Source
This commit is contained in:
piers 2009-02-25 22:56:59 +00:00
parent 203b7e2e7a
commit 898b282355
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
mod/scorm/locallib.php
View File

@ -362,7 +362,7 @@ function scorm_insert_track($userid,$scormid,$scoid,$attempt,$element,$value,$fo
}
if ($track = $DB->get_record('scorm_scoes_track',array('userid'=>$userid, 'scormid'=>$scormid, 'scoid'=>$scoid, 'attempt'=>$attempt, 'element'=>$element))) {
$track->value = addslashes($value);
$track->value = addslashes_js($value);
$track->timemodified = time();
$id = $DB->update_record('scorm_scoes_track',$track);
} else {
@ -371,7 +371,7 @@ function scorm_insert_track($userid,$scormid,$scoid,$attempt,$element,$value,$fo
$track->scoid = $scoid;
$track->attempt = $attempt;
$track->element = $element;
$track->value = addslashes($value);
$track->value = addslashes_js($value);
$track->timemodified = time();
$id = $DB->insert_record('scorm_scoes_track',$track);
}

2
mod/scorm/report.php
View File

@ -194,7 +194,7 @@
}
echo '<div id="scormtablecontainer">';
if (has_capability('mod/scorm:deleteresponses',$contextmodule)) {
echo '<form id="attemptsform" method="post" action="'.$FULLSCRIPT.'" onsubmit="var menu = document.getElementById(\'menuaction\'); return (menu.options[menu.selectedIndex].value == \'delete\' ? \''.addslashes(get_string('deleteattemptcheck','quiz')).'\' : true);">';
echo '<form id="attemptsform" method="post" action="'.$FULLSCRIPT.'" onsubmit="var menu = document.getElementById(\'menuaction\'); return (menu.options[menu.selectedIndex].value == \'delete\' ? \''.addslashes_js(get_string('deleteattemptcheck','quiz')).'\' : true);">';
echo '<input type="hidden" name="id" value="'.$id.'">';
print_table($table);
echo '<a href="javascript:select_all_in(\'DIV\',null,\'scormtablecontainer\');">'.get_string('selectall', 'quiz').'</a> / ';