PHP Code:
$folder .='<td STYLE="cursor:hand;cursor: pointer" onClick="location.href=\'$script_url?what=$what&step=2&page=1&cat=$get_item\';" onMouseover="this.style.backgroundColor=\'#C6D3EF\';this.style.border=\'1px solid #3169C6\'; " onMouseout="this.style.backgroundColor=''; this.style.border=\'\' align="center" height="27" >n';
PHP Code:
$folder .="<font face=Verdana size=1>Category: <b>$get_item2</b></font><br><img align=absmiddle src=\"$folder_url/$get_item/$random_img_cat\"></td>n";
I think that should fix it. Whoever wrote this code made no attempt to escape quotes.
Last edited by NullPointer; 01-21-2009 at 09:50 PM..
|