Browse Source

[svn r11815] Fix a bug with when student's name contains single quotes

Julian Prud'homme 18 years ago
parent
commit
34d48d13dc
2 changed files with 4 additions and 4 deletions
  1. 2 2
      main/newscorm/aicc_api.php
  2. 2 2
      main/newscorm/scorm_api.php

+ 2 - 2
main/newscorm/aicc_api.php

@@ -150,7 +150,7 @@ function LMSGetValue(param) {
 		result='<?php echo $_user['user_id']; ?>';
 	}else if(param == 'cmi.core.student_name'){
 		  <?php
-			$who=$_user['lastName'].", ".$_user['firstName'];
+			$who=addslashes($_user['lastName'].", ".$_user['firstName']);
 		    echo "result='$who';"; 
 		  ?>
 	}else if(param == 'cmi.core.lesson_location'){
@@ -206,7 +206,7 @@ function LMSGetValue(param) {
 			break;
 		case 'cmi.core.student_name'	: 
 		  <?php
-			$who=$_user['firstName'].",".$_user['lastName'];
+			$who=addslashes($_user['firstName'].",".$_user['lastName']);
 		    echo "result='$who';"; 
 		  ?>	break;
 		case 'cmi.core.lesson_location'	:

+ 2 - 2
main/newscorm/scorm_api.php

@@ -222,7 +222,7 @@ function LMSGetValue(param) {
 		result='<?php echo $_user['user_id']; ?>';
 	}else if(param == 'cmi.core.student_name'){
 		  <?php
-			$who=$_user['lastName'].", ".$_user['firstName'];
+			$who=addslashes($_user['lastName'].", ".$_user['firstName']);
 		    echo "result='$who';"; 
 		  ?>
 	}else if(param == 'cmi.core.lesson_location'){
@@ -287,7 +287,7 @@ function LMSGetValue(param) {
 			break;
 		case 'cmi.core.student_name'	: 
 		  <?php
-			$who=$_user['firstName'].",".$_user['lastName'];
+			$who=addslashes($_user['firstName'].",".$_user['lastName']);
 		    echo "result='$who';"; 
 		  ?>	break;
 		case 'cmi.core.lesson_location'	: