diff --git a/functions.php b/functions.php index 3928b2a34..b2694f7ec 100644 --- a/functions.php +++ b/functions.php @@ -7059,7 +7059,7 @@ if ($value) { print ""; } diff --git a/modules/backend-rpc.php b/modules/backend-rpc.php index 1447634bf..947dd5c50 100644 --- a/modules/backend-rpc.php +++ b/modules/backend-rpc.php @@ -143,8 +143,10 @@ if ($subop == "setpref") { header("Content-Type: text/plain"); + $value = str_replace("\n", "
", $_REQUEST['value']); + $key = db_escape_string($_REQUEST["key"]); - $value = db_escape_string($_REQUEST["value"]); + $value = db_escape_string($value); set_pref($link, $key, $value); diff --git a/modules/popup-dialog.php b/modules/popup-dialog.php index d9de6ab53..bc206be07 100644 --- a/modules/popup-dialog.php +++ b/modules/popup-dialog.php @@ -796,6 +796,8 @@ $value = get_pref($link, "USER_STYLESHEET"); + $value = str_replace("
", "\n", $value); + print T_sprintf("You can override colors, fonts and layout of your currently selected theme with custom CSS declarations here. This file can be used as a baseline.", "tt-rss.css"); print "";