MDL-64372 userpix: Escape fullname string on userpix index page

This commit is contained in:
Michael Hawkins 2018-12-11 14:27:13 +08:00 committed by Jenkins
parent 20c3619d77
commit 2e057f082d

View file

@ -25,7 +25,7 @@ echo $OUTPUT->header();
$rs = $DB->get_recordset_select("user", "deleted = 0 AND picture > 0", array(), "lastaccess DESC", user_picture::fields());
foreach ($rs as $user) {
$fullname = fullname($user);
$fullname = s(fullname($user));
echo "<a href=\"$CFG->wwwroot/user/view.php?id=$user->id&amp;course=1\" ".
"title=\"$fullname\">";
echo $OUTPUT->user_picture($user);