Skip to content

Commit a3220e7

Browse files
committed
[queue.php] Fix use of htmlspecialchars()
1 parent 141c803 commit a3220e7

File tree

1 file changed

+8
-7
lines changed

1 file changed

+8
-7
lines changed

www/command/queue.php

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -174,16 +174,16 @@ function getPlayqueue($resp) {
174174
$idx = -1;
175175

176176
while ($line) {
177-
list ($element, $value) = explode(': ', $line, 2);
177+
list ($element, $origValue) = explode(': ', $line, 2);
178178

179-
$value = htmlspecialchars($value, ENT_NOQUOTES);
179+
$value = htmlspecialchars($origValue, ENT_NOQUOTES);
180180

181181
if ($element == 'file') {
182182
$idx++;
183-
$queue[$idx]['file'] = $value;
184-
$level = stripos(dirname($value), '.cue', -4) === false ? 1 : 2;
185-
$queue[$idx]['cover_hash'] = substr($value, 0, 4) == 'http' ? '' : md5(dirname($value, $level));
186-
$queue[$idx]['fileext'] = getSongFileExt($value);
183+
$queue[$idx]['file'] = $origValue;
184+
$level = stripos(dirname($origValue), '.cue', -4) === false ? 1 : 2;
185+
$queue[$idx]['cover_hash'] = substr($origValue, 0, 4) == 'http' ? '' : md5(dirname($origValue, $level));
186+
$queue[$idx]['fileext'] = getSongFileExt($origValue);
187187
$queue[$idx]['TimeMMSS'] = formatSongTime($queue[$idx]['Time']);
188188
} else {
189189
if ($element == 'Genre' || $element == 'Artist' || $element == 'AlbumArtist' || $element == 'Conductor' || $element == 'Performer') {
@@ -200,7 +200,8 @@ function getPlayqueue($resp) {
200200
$line = strtok("\n");
201201
}
202202
}
203-
203+
// DEBUG:
204+
//workerLog(print_r($queue, true));
204205
return $queue;
205206
}
206207

0 commit comments

Comments
 (0)