Commit 7ce0257f authored by Richard Mansfield's avatar Richard Mansfield
Browse files

Escape user's name in user stats page


Signed-off-by: default avatarRichard Mansfield <richardm@catalyst.net.nz>
parent 490202cf
......@@ -290,7 +290,7 @@ function user_statistics($limit, $offset, &$sitedata) {
'admin',
round($meanfriends, 1),
get_config('wwwroot') . 'user/view.php?id=' . $maxfriends->id,
display_name($maxfriends, null, true),
hsc(display_name($maxfriends, null, true)),
$maxfriends->friends
);
}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment