diff --git a/public_html/valuestore/browse.php b/public_html/valuestore/browse.php index a56a9260effb9adf8f051dc0ee5fe2b836185051..6cda243ea0b5c2871b52644823f15712751ca453 100644 --- a/public_html/valuestore/browse.php +++ b/public_html/valuestore/browse.php @@ -120,11 +120,11 @@ if(is_array($aData) && count($aData)){ // $sTable.='<tr>'; foreach ($aRow as $sKey=>$sValue){ // $sTable.='<td class="'.$sKey.'"><a href="'.$sUrl.'">'.$sValue.'</a></td>'; - $sOnclick=strstr($sValue, '"') - ? '' - : 'onclick="$(\'#eFilter\').val(\''.$sValue.'\');filterTable();" title="click to filter by ['.$sValue.']"' + $sLabel=strstr($sValue, '"') + ? htmlentities($sValue) + : '<a href="#" onclick="$(\'#eFilter\').val(\''.$sValue.'\');filterTable();" title="click to filter by ['.$sValue.']">'.htmlentities($sValue).'</a>' ; - $sTable.='<td class="'.$sKey.'" '.$sOnclick.'>'.htmlentities($sValue).'</td>'."\n"; + $sTable.='<td class="'.$sKey.'" '.$sOnclick.'>'.$sLabel.'</td>'."\n"; } $sTable.='<td>' // . '<button onclick="location.href=\''.$sItemUrl.'&action=get\'">View</button>'