--- fenglin/www/show_article.php	2025/03/01 09:08:07	1.8
+++ fenglin/www/show_article.php	2025/03/18 07:11:18	1.12
@@ -1,6 +1,6 @@
 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
 <?
-	require_once "./lml.inc.php";
+	require_once "../lib/lml.inc.php";
 	$db_conn=include "./db_open.inc.php";
 	if (isset($_GET["aid"]))
 		$aid=intval($_GET["aid"]);
@@ -77,10 +77,10 @@ TD.content
 		<td>
 			<table width="95%" border="0" cellpadding="0" cellspacing="0">
 				<tr height="30">
-					<td align="center"><font size=4><b><? echo $row["title"]; ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
+					<td align="center"><font size=4><b><? echo htmlspecialchars($row["title"], ENT_HTML401, 'UTF-8'); ?> </b></font><font color=gray>[<? echo ($row["transship"]?"转载":"原创"); ?>]</font></td>
 				</tr>
 				<tr height="20">
-					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo $row["nickname"]; ?></td>
+					<td align="center">(<? echo $row["sub_dt"]; ?>)   <? echo ($row["transship"]?"转载":"作者"); ?>：<? echo htmlspecialchars($row["nickname"], ENT_HTML401, 'UTF-8'); ?></td>
 				</tr>
 				<tr height="10">
 					<td></td>
@@ -92,7 +92,7 @@ TD.content
 					<td></td>
 				</tr>
 				<tr>
-					<td class="content"><? echo LML(htmlspecialchars($content, ENT_COMPAT | ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
+					<td class="content"><? echo LML(htmlspecialchars($content, ENT_HTML401, 'UTF-8'),true,true,1024); ?></td>
 				</tr>
 				<tr>
 					<td>
@@ -120,17 +120,7 @@ TD.content
 			case "jpg":
 			case "jpeg":
 ?>
-						<img onmousewheel="return bbs_img_zoom(event,this)" src="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>">
-<?
-				break;
-			case "swf":
-?>
-						<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000">
-						<param name=movie value="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>">
-						<param name=quality value=high>
-						<embed src="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>" quality=high type="application/x-shockwave-flash">
-						</embed>
-						</object>
+						<img onmousewheel="return bbs_img_zoom(event, this)" src="/bbs/dl_file.php?aid=<? echo $row_attachment["AID"]; ?>">
 <?
 				break;
 		}

[]	[]
() ：	() ：


@@ -120,17 +120,7 @@ TD.content case "jpg": case "jpeg": ?> - "> - - + ">