From b240e36f19aa1d3037959cc8ada6d15590b0a4d7 Mon Sep 17 00:00:00 2001
From: james <james>
Date: Fri, 16 Oct 2009 15:23:21 +0000
Subject: [PATCH] htmlspecialchars the from and subject of communications

---
 admin/fundraising_campaigns.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin/fundraising_campaigns.php b/admin/fundraising_campaigns.php
index 0de9586..46cfbe9 100644
--- a/admin/fundraising_campaigns.php
+++ b/admin/fundraising_campaigns.php
@@ -415,8 +415,8 @@ switch($_GET['action']){
 
 
 				echo "<table cellspacing=0 cellpadding=3 border=1 style=\"margin-left: 30px; margin-right: 30px; width: 700px;\">";
-				echo "<tr><td>".i18n("Subject")."</td><td>$email->subject</td></tr>\n";
-				echo "<tr><td>".i18n("From")."</td><td>$email->from</td></tr>\n";
+				echo "<tr><td>".i18n("Subject")."</td><td>".htmlspecialchars($email->subject)."</td></tr>\n";
+				echo "<tr><td>".i18n("From")."</td><td>".htmlspecialchars($email->from)."</td></tr>\n";
 				echo "<tr><td colspan=\"2\">".$email->bodyhtml."</td></tr>\n";
 				echo "<tr><td colspan=\"2\">";
 				echo "<table style=\"width: 100%;\"><tr>";