Protect the help page

diff --git a/settings/templates/help.php b/settings/templates/help.php
index a53ec76d681a28fb805cb0987728873e4c9e404f..cf61207e6015bf3ac3978570627104b60b3841df 100644 (file)
--- a/settings/templates/help.php
+++ b/settings/templates/help.php
@@ -26,9 +26,9 @@
        <?php foreach($_["kbe"] as $kb): ?>
        <div class="helpblock">
                <?php if($kb["preview1"] <> "") { echo('<img class="preview" src="'.$kb["preview1"].'" />'); } ?>
-               <?php if($kb['detailpage']<>'') echo('<p><a target="_blank" href="'.$kb['detailpage'].'"><strong>'.$kb["name"].'</strong></a></p>');?>
-               <p><?php echo $kb['description'];?></p>
-               <?php if($kb['answer']<>'') echo('<p><strong>'.$l->t('Answer').':</strong><p>'.$kb['answer'].'</p>');?>
+               <?php if($kb['detailpage']<>'') echo('<p><a target="_blank" href="'.$kb['detailpage'].'"><strong>'.htmlentities($kb["name"]).'</strong></a></p>');?>
+               <p><?php echo htmlentities($kb['description']);?></p>
+               <?php if($kb['answer']<>'') echo('<p><strong>'.$l->t('Answer').':</strong><p>'.htmlentities($kb['answer']).'</p>');?>
        </div>
        <?php endforeach;
 endif?>