Index: branches/5.2.x/core/units/categories/categories_event_handler.php =================================================================== diff -u -N -r15268 -r15314 --- branches/5.2.x/core/units/categories/categories_event_handler.php (.../categories_event_handler.php) (revision 15268) +++ branches/5.2.x/core/units/categories/categories_event_handler.php (.../categories_event_handler.php) (revision 15314) @@ -1,6 +1,6 @@ status = kEvent::erSTOP; - $string = kUtil::unhtmlentities($this->Application->GetVar('preview_content')); + $string = htmlspecialchars_decode($this->Application->GetVar('preview_content')); $category_helper = $this->Application->recallObject('CategoryHelper'); /* @var $category_helper CategoryHelper */ @@ -2286,7 +2286,7 @@ $event->redirect = false; $search_table = TABLE_PREFIX.'ses_'.$this->Application->GetSID().'_'.TABLE_PREFIX.'Search'; - $keywords = kUtil::unhtmlentities( trim($this->Application->GetVar('keywords')) ); + $keywords = htmlspecialchars_decode( trim($this->Application->GetVar('keywords')) ); $query_object = $this->Application->recallObject('HTTPQuery'); /* @var $query_object kHTTPQuery */ Index: branches/5.2.x/core/kernel/processors/main_processor.php =================================================================== diff -u -N -r15278 -r15314 --- branches/5.2.x/core/kernel/processors/main_processor.php (.../main_processor.php) (revision 15278) +++ branches/5.2.x/core/kernel/processors/main_processor.php (.../main_processor.php) (revision 15314) @@ -1,6 +1,6 @@ Application->isAdmin && isset($options['allow_html']) && $options['allow_html'] ) { // this allows to revert htmlspecialchars call for each field submitted on front-end - $value = kUtil::unhtmlentities($value); + $value = htmlspecialchars_decode($value); } return $value; Index: branches/5.2.x/core/units/thesaurus/thesaurus_eh.php =================================================================== diff -u -N -r15145 -r15314 --- branches/5.2.x/core/units/thesaurus/thesaurus_eh.php (.../thesaurus_eh.php) (revision 15145) +++ branches/5.2.x/core/units/thesaurus/thesaurus_eh.php (.../thesaurus_eh.php) (revision 15314) @@ -1,6 +1,6 @@ Application->isAdminUser ) { - $keywords = kUtil::unhtmlentities(trim($this->Application->GetVar('keywords'))); + $keywords = htmlspecialchars_decode(trim($this->Application->GetVar('keywords'))); $object->addFilter('search_filter', '%1$s.SearchTerm LIKE ' . $this->Conn->qstr($keywords) . ' OR %1$s.SearchTerm LIKE ' . $this->Conn->qstr($keywords . '_')); } } Index: branches/5.2.x/core/kernel/globals.php =================================================================== diff -u -N -r15246 -r15314 --- branches/5.2.x/core/kernel/globals.php (.../globals.php) (revision 15246) +++ branches/5.2.x/core/kernel/globals.php (.../globals.php) (revision 15314) @@ -1,6 +1,6 @@ Application->GetVar('keywords')) ); + $keywords = htmlspecialchars_decode( trim($this->Application->GetVar('keywords')) ); if ( !$keywords ) { return ''; } Index: branches/5.2.x/core/kernel/db/cat_event_handler.php =================================================================== diff -u -N -r15145 -r15314 --- branches/5.2.x/core/kernel/db/cat_event_handler.php (.../cat_event_handler.php) (revision 15145) +++ branches/5.2.x/core/kernel/db/cat_event_handler.php (.../cat_event_handler.php) (revision 15314) @@ -1,6 +1,6 @@ redirect = false; $search_table = TABLE_PREFIX.'ses_'.$this->Application->GetSID().'_'.TABLE_PREFIX.'Search'; - $keywords = kUtil::unhtmlentities( trim($this->Application->GetVar('keywords')) ); + $keywords = htmlspecialchars_decode( trim($this->Application->GetVar('keywords')) ); $query_object = $this->Application->recallObject('HTTPQuery'); /* @var $query_object kHTTPQuery */ @@ -1634,14 +1634,14 @@ $condition = ''; switch ($record['FieldType']) { case 'select': - $keywords[$field] = kUtil::unhtmlentities( $keywords[$field] ); + $keywords[$field] = htmlspecialchars_decode( $keywords[$field] ); if ($keywords[$field]) { $condition = sprintf($condition_patterns['is'], $field_name, $this->Conn->qstr( $keywords[$field] )); } break; case 'multiselect': - $keywords[$field] = kUtil::unhtmlentities( $keywords[$field] ); + $keywords[$field] = htmlspecialchars_decode( $keywords[$field] ); if ($keywords[$field]) { $condition = Array (); $values = explode('|', substr($keywords[$field], 1, -1)); @@ -1653,7 +1653,7 @@ break; case 'text': - $keywords[$field] = kUtil::unhtmlentities( $keywords[$field] ); + $keywords[$field] = htmlspecialchars_decode( $keywords[$field] ); if (mb_strlen($keywords[$field]) >= $this->Application->ConfigValue('Search_MinKeyword_Length')) { $highlight_keywords[] = $keywords[$field]; Index: branches/5.2.x/core/units/forms/form_submissions/form_submissions_eh.php =================================================================== diff -u -N -r15145 -r15314 --- branches/5.2.x/core/units/forms/form_submissions/form_submissions_eh.php (.../form_submissions_eh.php) (revision 15145) +++ branches/5.2.x/core/units/forms/form_submissions/form_submissions_eh.php (.../form_submissions_eh.php) (revision 15314) @@ -1,6 +1,6 @@ Application->recallObject('theme.current'); /* @var $theme kDBItem */ - $template = kUtil::unhtmlentities($this->Application->GetVar('success_template')); // kHTTPQuery do htmlspecialchars on everything + $template = htmlspecialchars_decode($this->Application->GetVar('success_template')); // kHTTPQuery do htmlspecialchars on everything $alias_template = $theme->GetField('TemplateAliases', $template); $event->redirect = $alias_template ? $alias_template : $template; Index: branches/5.2.x/core/units/user_profile/user_profile_eh.php =================================================================== diff -u -N -r15137 -r15314 --- branches/5.2.x/core/units/user_profile/user_profile_eh.php (.../user_profile_eh.php) (revision 15137) +++ branches/5.2.x/core/units/user_profile/user_profile_eh.php (.../user_profile_eh.php) (revision 15314) @@ -1,6 +1,6 @@ Application->StorePersistentVar($variable_name, kUtil::unhtmlentities($variable_value)); + $this->Application->StorePersistentVar($variable_name, htmlspecialchars_decode($variable_value)); } } Index: branches/5.2.x/core/units/thesaurus/thesaurus_tp.php =================================================================== diff -u -N -r15152 -r15314 --- branches/5.2.x/core/units/thesaurus/thesaurus_tp.php (.../thesaurus_tp.php) (revision 15152) +++ branches/5.2.x/core/units/thesaurus/thesaurus_tp.php (.../thesaurus_tp.php) (revision 15314) @@ -1,6 +1,6 @@ Application->GetVar('keywords')) ); + $keywords = htmlspecialchars_decode( trim($this->Application->GetVar('keywords')) ); $table_name = $this->Application->getUnitOption($this->Prefix, 'TableName'); $sql = 'SELECT *