From 79e4ea661d017d1d0f3b1dac501257c986dbb55f Mon Sep 17 00:00:00 2001
From: oesi <oesi@technikum-wien.at>
Date: Mon, 4 May 2015 16:34:15 +0200
Subject: [PATCH] HTML Zeichen in Statistiken werden jetzt konvertiert

---
 include/statistik.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/statistik.class.php b/include/statistik.class.php
index c2bf7d642..1dfa126d9 100644
--- a/include/statistik.class.php
+++ b/include/statistik.class.php
@@ -539,7 +539,7 @@ class statistik extends basis_db
 				$anzahl_spalten = $this->db_num_fields($this->data);
 				for($spalte=0;$spalte<$anzahl_spalten;$spalte++)
 				{
-					$this->html.= '<th>'.$this->db_field_name($this->data,$spalte).'</th>';
+					$this->html.= '<th>'.$this->convert_html_chars($this->db_field_name($this->data,$spalte)).'</th>';
 					$this->csv.='"'.$this->db_field_name($this->data,$spalte).'",';
 				}
 				$this->html.= '</tr></thead><tbody>';
@@ -552,7 +552,7 @@ class statistik extends basis_db
 					for($spalte=0;$spalte<$anzahl_spalten;$spalte++)
 					{
 						$name = $this->db_field_name($this->data,$spalte);
-						$this->html.= '<td>'.$row->$name.'</td>';
+						$this->html.= '<td>'.$this->convert_html_chars($row->$name).'</td>';
 						$this->csv.= '"'.$row->$name.'",';
 					}