X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=plugins%2Ffunction.select_db_table.php;h=41d1bae72f9302200971180b9e95bb38d1bf0228;hb=07e48b6bbcc3da03e8867d9ec4c0198109691596;hp=5bc2bcb56d43cd4020e33912c15f6268d6e9d66b;hpb=5ddeb07cc787dd1dc3630a31f1528f5cc7c4d9b9;p=platal.git

diff --git a/plugins/function.select_db_table.php b/plugins/function.select_db_table.php
index 5bc2bcb..41d1bae 100644
--- a/plugins/function.select_db_table.php
+++ b/plugins/function.select_db_table.php
@@ -1,6 +1,6 @@
 <?php
 /***************************************************************************
- *  Copyright (C) 2003-2007 Polytechnique.org                              *
+ *  Copyright (C) 2003-2008 Polytechnique.org                              *
  *  http://opensource.polytechnique.org/                                   *
  *                                                                         *
  *  This program is free software; you can redistribute it and/or modify   *
@@ -19,6 +19,7 @@
  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  ***************************************************************************/
 
+require_once 'platal.inc.php';
 
 function select_options($table,$valeur,$champ="text",$pad=false,
                         $where="",$join="",$group="")
@@ -27,8 +28,8 @@ function select_options($table,$valeur,$champ="text",$pad=false,
     $order = $champ;
     if ($group) {
         $fields .= ',' . $group;
-        $order = $group . ',' . $order; 
-    } 
+        $order = $group . ',' . $order;
+    }
     $sql = "SELECT $fields FROM $table AS t $join $where ORDER BY $order";
     $res = XDB::iterRow($sql);
     $sel = ' selected="selected"';
@@ -44,11 +45,11 @@ function select_options($table,$valeur,$champ="text",$pad=false,
             if (!is_null($optgrp)) {
                 $html .= '</optgroup>';
             }
-            $html .= '<optgroup label="' . htmlentities($my_grp, ENT_QUOTES) . '">';
+            $html .= '<optgroup label="' . pl_entities($my_grp, ENT_QUOTES) . '">';
             $optgrp = $my_grp;
         }
-        $html .= sprintf("<option value=\"%s\" %s>%s</option>\n", 
-                         $my_id, ($valeur==$my_id?$sel:""), $my_text);
+        $html .= sprintf("<option value=\"%s\" %s>%s</option>\n",
+                         $my_id, $valeur==$my_id ? $sel : "", pl_entities($my_text));
     }
     if (!is_null($optgrp)) {
         $html .= '</optgroup>';
@@ -71,4 +72,5 @@ function smarty_function_select_db_table($params, &$smarty) {
                           $params['where'], $params['join'], $params['group']);
 }
 
+// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
 ?>