[-] BO : Avoid slash in special product name

harelguy · Jan 22, 2015 · 57cc2ed · 57cc2ed
1 parent c237427
commit 57cc2ed
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/classes/Referrer.php b/classes/Referrer.php
@@ -336,7 +336,7 @@ public static function getAjaxProduct($id_referrer, $id_product, $employee = nul
 
 		$json_array = array(
 			'id_product' => (int)$product->id,
-			'product_name' => addslashes($product->name),
+			'product_name' => htmlspecialchars($product->name),
 			'uniqs' => (int)$stats_visits['uniqs'],
 			'visitors' => (int)$stats_visits['visitors'],
 			'visits' => (int)$stats_visits['visits'],
@@ -354,4 +354,4 @@ public static function getAjaxProduct($id_referrer, $id_product, $employee = nul
 
 		die ('['.Tools::jsonEncode($json_array).']');
 	}
-}
+}