--- fenglin/www/show_article.php	2025/03/01 09:08:07	1.8
+++ fenglin/www/show_article.php	2025/03/12 11:12:27	1.10
@@ -1,6 +1,6 @@
 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 <?
-	require_once "./lml.inc.php";
+	require_once "../lib/lml.inc.php";
 	$db_conn=include "./db_open.inc.php";
 	if (isset($_GET["aid"]))
 		$aid=intval($_GET["aid"]);
@@ -77,10 +77,10 @@ TD.content
 		<td>
 			<table width="95%" border="0" cellpadding="0" cellspacing="0">
 				<tr height="30">
-					<td align="center"><font size=4><b><? echo $row["title"]; ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
+					<td align="center"><font size=4><b><? echo htmlspecialchars($row["title"], ENT_HTML401, 'UTF-8'); ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
 				</tr>
 				<tr height="20">
-					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo $row["nickname"]; ?></td>
+					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo htmlspecialchars($row["nickname"], ENT_HTML401, 'UTF-8'); ?></td>
 				</tr>
 				<tr height="10">
 					<td></td>
@@ -92,7 +92,7 @@ TD.content
 					<td></td>
 				</tr>
 				<tr>
-					<td class="content"><? echo LML(htmlspecialchars($content, ENT_COMPAT | ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
+					<td class="content"><? echo LML(htmlspecialchars($content, ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
 				</tr>
 				<tr>
 					<td>
