  |
1 | 1 | | <?php |
| |
2 | 2 | | /* |
 |
3 | | - | $Id: html_output.php 1739 2007-12-20 00:52:16Z hpdl $ |
| |
| 3 | + | $Id: html_output.php 1839 2008-12-12 11:15:33Z hpdl $ |
|
4 | 4 | | |
| |
5 | 5 | | osCommerce, Open Source E-Commerce Solutions |
| |
6 | 6 | | http://www.oscommerce.com |
| |
7 | 7 | | |
|
8 | | - | Copyright (c) 2007 osCommerce |
| |
| 8 | + | Copyright (c) 2008 osCommerce |
|
9 | 9 | | |
| |
10 | 10 | | Released under the GNU General Public License |
| |
11 | 11 | | */ |
| |
12 | 12 | | |
| |
13 | 13 | | //// |
| |
14 | 14 | | // The HTML href link wrapper function |
| |
15 | 15 | | function tep_href_link($page = '', $parameters = '', $connection = 'NONSSL') { |
|
| 16 | + | $page = tep_output_string($page); |
| |
| 17 | + | |
|
16 | 18 | | if ($page == '') { |
| |
17 | 19 | | die('</td></tr></table></td></tr></table><br><br><font color="#ff0000"><b>Error!</b></font><br><br><b>Unable to determine the page link!<br><br>Function used:<br><br>tep_href_link(\'' . $page . '\', \'' . $parameters . '\', \'' . $connection . '\')</b>'); |
| |
18 | 20 | | } |
| |
|
|
 |
… |
|
30 | 32 | | if ($parameters == '') { |
| |
31 | 33 | | $link = $link . $page . '?' . SID; |
| |
32 | 34 | | } else { |
|
33 | | - | $link = $link . $page . '?' . $parameters . '&' . SID; |
| |
| 35 | + | $link = $link . $page . '?' . tep_output_string($parameters) . '&' . SID; |
|
34 | 36 | | } |
| |
35 | 37 | | |
| |
36 | 38 | | while ( (substr($link, -1) == '&') || (substr($link, -1) == '?') ) $link = substr($link, 0, -1); |