Add slash to username with apostrophe in user selector when subscribing to session - refs BT#13469

6 years ago · 92a87efb51
parent 545e1eb8f0
commit 92a87efb51
1 changed files with 5 additions and 2 deletions
--- a/main/session/add_users_to_session.php
+++ b/main/session/add_users_to_session.php
@ -236,8 +236,11 @@ function search_users($needle, $type)
                            $officialCode.$user['lastname'].' '.$user['firstname'].' ('.$user['username'].')';
                    }

-                    $return .= '<a href="javascript: void(0);" onclick="javascript: add_user_to_session(\''.$user['id']
-                        .'\',\''.$person_name.' '.'\')">'.$person_name.' </a><br />';
+                    $return .= Display::url(
+                        $person_name,
+                        'javascript: void(0);',
+                        ['onclick' => "add_user_to_session('".$user['id']."', '".addslashes($person_name)."');",]
+                    ).'<br>';
                } else {
                    $return .= '...<br />';
                }