diff --git a/src/system/inc/inc_fun_funAdmin.php b/src/system/inc/inc_fun_funAdmin.php index 60783625..9589bfec 100755 --- a/src/system/inc/inc_fun_funAdmin.php +++ b/src/system/inc/inc_fun_funAdmin.php @@ -140,6 +140,7 @@ function SpGetEditor($fname, $fvalue, $nheight = "350", $etype = "Basic", $gtype } if ($GLOBALS['cfg_html_editor'] == 'ckeditor') { $addConfig = ""; + $fvalue = htmlspecialchars($fvalue); if (defined("DEDEADMIN")) { $emoji = ""; if ($GLOBALS['cfg_db_language'] == "utf8mb4") { @@ -152,7 +153,7 @@ function SpGetEditor($fname, $fvalue, $nheight = "350", $etype = "Basic", $gtype } $code = << -
{$fvalue}
+ EOT; if ($gtype == "print") { @@ -165,7 +166,7 @@ EOT; /** * 获取更新信息 * - * @return void + * @return string */ function SpGetNewInfo() {