diff --git a/acp/core/ajax.plugins.php b/acp/core/ajax.plugins.php index 33ff35ad..acd98098 100644 --- a/acp/core/ajax.plugins.php +++ b/acp/core/ajax.plugins.php @@ -33,6 +33,7 @@ if(is_file('../../'.FC_CONTENT_DIR.'/plugins/'.$plugin)) { $plugin_src = file_get_contents('../../'.FC_CONTENT_DIR.'/plugins/'.$plugin); + $plugin_src = htmlentities($plugin_src,ENT_QUOTES,"UTF-8"); if(!is_writable('../../'.FC_CONTENT_DIR.'/plugins/'.$plugin)) { $message = '
The file is not writable
'; diff --git a/acp/core/list.plugins.php b/acp/core/list.plugins.php index d6be0cec..4b41ff26 100644 --- a/acp/core/list.plugins.php +++ b/acp/core/list.plugins.php @@ -29,7 +29,7 @@ if($_SESSION['user_class'] == 'administrator') { $edit_btn = ' '.$lang['edit'].''; } else { - $edit_btn = 'Source'; + $edit_btn = 'Source'; } $tpl_icon = "images/plugin-icon.png"; @@ -47,7 +47,7 @@ $tpl = str_replace("{\$MOD_NAV}", "$edit_btn","$tpl"); echo $tpl; - + /* Modal */ echo '