New spam submission form

[platal.git] / plugins / function.select_db_table.php

diff --git a/plugins/function.select_db_table.php b/plugins/function.select_db_table.php
index 4bb641c..8bb048c 100644 (file)
--- a/plugins/function.select_db_table.php
+++ b/plugins/function.select_db_table.php
@@ -31,7 +31,6 @@ function select_options($table,$valeur,$champ="text",$pad=false,
     } 
     $sql = "SELECT $fields FROM $table AS t $join $where ORDER BY $order";
     $res = XDB::iterRow($sql);
-    echo $sql;
     $sel = ' selected="selected"';
 
     // on ajoute une entree vide si $pad est vrai
@@ -45,7 +44,7 @@ function select_options($table,$valeur,$champ="text",$pad=false,
             if (!is_null($optgrp)) {
                 $html .= '</optgroup>';
             }
-            $html .= '<optgroup label="' . addslashes(htmlentities($my_grp)) . '">';
+            $html .= '<optgroup label="' . htmlentities($my_grp, ENT_QUOTES) . '">';
             $optgrp = $my_grp;
         }
         $html .= sprintf("<option value=\"%s\" %s>%s</option>\n",