--- fenglin/www/rss.php	2005/10/08 18:12:33	1.1
+++ fenglin/www/rss.php	2013/01/05 13:45:27	1.6
@@ -94,7 +94,7 @@ if ($page>$page_total)
 	<language>zh-cn</language> 
 	<docs></docs> 
 	<generator>Rss Generator By FengLin</generator> 
-	<copyright>Copyright (C) 2003-2005 www.FengLin.info, All rights reserved</copyright> 
+	<copyright>Copyright (C) 2003-2012 www.FengLin.info, All rights reserved</copyright> 
 <?
 $rs=mysql_query("SELECT * from bbs ".
 	"where SID=$sid and visible and ".
@@ -113,11 +113,12 @@ while($row=mysql_fetch_array($rs))
 	mysql_free_result($rs_content);
 ?>
 	<item>
-		<title><? echo htmlspecialchars($row["title"]).(ord(substr($row["title"],strlen($row["title"])-1,1))>127?" ":""); ?></title>
+		<title><? echo htmlspecialchars($row["title"], ENT_COMPAT | ENT_HTML401, 'GB2312').(ord(substr($row["title"],strlen($row["title"])-1,1))>127?" ":""); ?></title>
 		<link><? echo $base_url."/bbs/view_article.php?id=".($row["TID"]==0?$row["AID"]:$row["TID"]."#".$row["AID"]); ?></link>
 		<guid><? echo $base_url."/bbs/view_article.php?id=".($row["TID"]==0?$row["AID"]:$row["TID"]."#".$row["AID"]); ?></guid>
-		<description><? echo htmlspecialchars(str_replace("\n","<br/>",str_replace("\r\n","\n",LML(str_replace("\x14"," ",str_replace("\x1B"," ",$content)),false)))); ?></description>
-		<author><? echo $row["username"]." (".htmlspecialchars($row["nickname"]).")"; ?></author>
+		<description><? echo htmlspecialchars(str_replace("\n","<br/>",str_replace("\r\n","\n",LML(str_replace("\x14"," ",str_replace("\x1B"," ",$content)),false))),
+										ENT_COMPAT | ENT_HTML401, 'GB2312'); ?></description>
+		<author><? echo $row["username"]." (".htmlspecialchars($row["nickname"], ENT_COMPAT | ENT_HTML401, 'GB2312').")"; ?></author>
 		<pubDate><? echo gmstrftime("%a, %d %b %Y %H:%M:%S GMT",strtotime($row["sub_dt"])); ?></pubDate>
 		<annotate:reference><? echo $base_url."/bbs/view_article.php?id=".($row["TID"]==0?$row["AID"]:$row["TID"]); ?></annotate:reference>
 	</item>