Changeset 17638

Timestamp:

2008/10/01 10:01:28 (16 years ago)

Author:

nakanishi

Message:

エスケープする

File:

• branches/version-2/data/Smarty/templates/default/list.tpl (modified) (1 diff)

branches/version-2/data/Smarty/templates/default/list.tpl

@@ -53 +53 @@
 <div id="undercolumn">
   <form name="form1" id="form1" method="post" action="<!--{$smarty.server.REQUEST_URI|escape}-->">
-    <input type="hidden" name="pageno" value="<!--{$tpl_pageno}-->" />
+    <input type="hidden" name="pageno" value="<!--{$tpl_pageno|escape}-->" />
     <input type="hidden" name="mode" value="" />
-    <input type="hidden" name="orderby" value="<!--{$orderby}-->" />
+    <input type="hidden" name="orderby" value="<!--{$orderby|escape}-->" />
     <input type="hidden" name="product_id" value="" />
   <div id="listtitle"><h2><!--★タイトル★--><!--{$tpl_subtitle}--></h2></div>