Made admin convert all vars (strip slashes and convert xml special chars)

2 files changed, 15 insertions, 1 deletions

diff --git a/pages/admin.php b/pages/admin.php
index 3f924c7..60596ab 100644
--- a/pages/admin.php
+++ b/pages/admin.php
@@ -39,7 +39,8 @@ if($admin_module) {
 <?php
 if($admin_submodule) {
   echo "<div class=\"submodule_header\">$admin_submodule_name</div>\n";
-  $admin_module->admin($admin_submodule, $a, $vars);
+	include_once($UTIL_DIR . "/convert.php");
+  $admin_module->admin($admin_submodule, $a, convert_array($vars));
 }
 ?>
 </div>
diff --git a/utils/convert.php b/utils/convert.php
index 6ba1964..4471e8f 100644
--- a/utils/convert.php
+++ b/utils/convert.php
@@ -8,4 +8,17 @@ function convert($message)
 	return $message;
 }
 
+function convert_array($vs)
+{
+	$vars = array();
+
+	if(sizeof($vs)) {
+		foreach($vs as $k => $v) {
+			$vars[$k] = convert($v);
+		}
+	}
+
+	return $vars;
+}
+
 ?>
\ No newline at end of file