The differences between the current rss-comment.php and the one from 1.1.6 are:
`--- O:ZenPhotozenphoto v1.1.6rss-comments.php 2008-03-29 14:19:00.000000000 -0700
+++ O:testalbumzenphotohtdocsrss-comments.php 2008-06-18 15:41:34.000000000 -0700
@@ -1,8 +1,9 @@
<?php
if (!defined('ZENFOLDER')) { define('ZENFOLDER', 'zp-core'); }
+define('OFFSET_PATH', 0);
header('Content-Type: application/xml');
require_once(ZENFOLDER . "/template-functions.php");
$themepath = 'themes';
$host = htmlentities($_SERVER["HTTP_HOST"], ENT_QUOTES, 'UTF-8');
@@ -85,29 +86,28 @@
if($comment['type'] === "images") {
$imagetag = $imagepath.$comment['filename'].$modrewritesuffix;
} else {
$imagetag = "";
}
$date = $comment['date'];
- $albumtitle = $comment['albumtitle'];
+ $albumtitle = htmlspecialchars($comment['albumtitle']);
if ($comment['title'] == "") $title = $image; else $title = $comment['title'];
$website = $comment['website'];
$shortcomment = truncate_string($comment['comment'], 123);
if(!empty($title)) {
$title = ": ".$title;
}
$count++;
?>
<item>
-<title><?php echo $albumtitle.$title." by ".$author; ?></title>
+<title><?php echo htmlspecialchars($albumtitle.$title." by ".$author, ENT_QUOTES); ?></title>
<link><?php echo '<![CDATA[http://'.$host.WEBPATH.$albumpath.$album.$imagetag.']]>';?></link>
-<dc:creator><?php echo $author; ?></dc:creator>
-<description><?php echo $shortcomment; ?></description>
-<category><?php echo $albumtitle; ?></category>
+<description><?php echo htmlspecialchars($shortcomment, ENT_QUOTES); ?></description>
+<category><?php echo htmlspecialchars($albumtitle, ENT_QUOTES); ?></category>
<guid><?php echo '<![CDATA[http://'.$host.WEBPATH.$albumpath.$album.$imagetag.']]>';?></guid>
<pubDate><?php echo fixRSSDate($date); ?></pubDate>
</item>
<?php } ?>
</channel>
</rss>`