mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-19 19:09:13 -04:00
54ffea2419
approach using html::specialchars and purify uses HTMLPurifier to intelligently cleanse the output fields. Use purifier for text and title fields where it is likely that a user would enter html to format their data.
17 lines
713 B
PHP
17 lines
713 B
PHP
<?php defined("SYSPATH") or die("No direct script access.") ?>
|
|
<ul>
|
|
<? foreach ($comments as $i => $comment): ?>
|
|
<li class="<?= ($i % 2 == 0) ? "gEvenRow" : "gOddRow" ?>">
|
|
<img src="<?= $comment->author()->avatar_url(32, $theme->theme_url("images/avatar.jpg", true)) ?>"
|
|
class="gAvatar"
|
|
alt="<?= p::clean($comment->author_name()) ?>"
|
|
width="32"
|
|
height="32" />
|
|
<?= gallery::date_time($comment->created) ?>
|
|
<?= t('<a href="#">%author_name</a> said <em>%comment_text</em>',
|
|
array("author_name" => p::clean($comment->author_name()),
|
|
"comment_text" => text::limit_words(p::purify($comment->text), 50))); ?>
|
|
</li>
|
|
<? endforeach ?>
|
|
</ul>
|