[Fixed] HTML characters still show up when editing a users profile

[vBadvanced]

I'm kinda surprised nobody's pointed this out before... If you go to edit a users's profile in the Admin CP, in the Custom Profile Fields section it will show " instead of the " mark for users that have that in their profiles. I'm not sure if it does that with any other HTML characters, but I know it's done it with the " marks for a while now. It doesn't really affect anything and is easily fixed by putting unhtmlspecialchars around $userfield[$varname] in admin/user.php, but I just figured I'd point that out to one of the devs. :)

[vBadvanced]

Bump... Shouldn't this be considered a small bug?

[Steve Machol]

Moved to Bugs for a Dev to look at.

[Boofo]

I'm kinda surprised nobody's pointed this out before... If you go to edit a users's profile in the Admin CP, in the Custom Profile Fields section it will show " instead of the " mark for users that have that in their profiles. I'm not sure if it does that with any other HTML characters, but I know it's done it with the " marks for a while now. It doesn't really affect anything and is easily fixed by putting unhtmlspecialchars around $userfield[$varname] in admin/user.php, but I just figured I'd point that out to one of the devs. :)

I've noticed the same thing. Where and how exactly would you put that?

[vBadvanced]

IIRC you would just search in your admin/user.php file for $userfield[$varname] and replace it with unhtmlspecialchars($userfield[$varname])

[Scott MacVicar]

added the false fourth parameter to the makeinputcode and htmlspecialchar on the profile field when being updated.