From dfcbf29d3f6f430720d404d94c22e13e5ea5c35f Mon Sep 17 00:00:00 2001
From: Retro_Guy <retro.guy@rocksolidbbs.com>
Date: Sun, 27 Aug 2023 11:22:36 -0700
Subject: [PATCH] Convert htmlentities in Reply in mail.php.

---
 Rocksolid_Light/spoolnews/mail.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Rocksolid_Light/spoolnews/mail.php b/Rocksolid_Light/spoolnews/mail.php
index f862783..e5d6efc 100644
--- a/Rocksolid_Light/spoolnews/mail.php
+++ b/Rocksolid_Light/spoolnews/mail.php
@@ -314,7 +314,7 @@ if (isset($_POST['command']) && $_POST['command'] == 'Send') {
     echo '<table><tbody><tr>';
     echo "<td>To: </td><td><input type='text' name='to' value='" . $mail_to . "'/></td>";
     echo '</tr><tr>';
-    echo "<td>Subject: </td><td><input type='text' name='subject' value='" . $subject . "'/></td>";
+    echo "<td>Subject: </td><td><input type='text' name='subject' value='" . htmlentities($subject) . "'/></td>";
     echo '</tr><tr>';
     echo "<td></td><td><textarea class='postbody' id='message' name='message'>$message</textarea></td>";
     echo '</tr><tr>';