X-Git-Url: https://jfr.im/git/irc/unrealircd/unrealircd-webpanel.git/blobdiff_plain/f41baac84976bab1d52496138dace5a35b749743..408491c6430721b73c29af47c9eb044be254342b:/channels/index.php

diff --git a/channels/index.php b/channels/index.php
index d4318e9..8b52d77 100644
--- a/channels/index.php
+++ b/channels/index.php
@@ -27,11 +27,11 @@ $channels = $rpc->channel()->getAll();
 		foreach($channels as $channel)
 		{
 			echo "<tr>";
-			echo "<td>".$channel->name."</td>";
+			echo "<td>".htmlspecialchars($channel->name)."</td>";
 			echo "<td>".$channel->num_users."</td>";
 			$modes = (isset($channel->modes)) ? "+" . $channel->modes : "<none>";
-			echo "<td>".$modes."</td>";
-			$topic = (isset($channel->topic)) ? $channel->topic : "";
+			echo "<td>".htmlspecialchars($modes)."</td>";
+			$topic = (isset($channel->topic)) ? htmlspecialchars($channel->topic) : "";
 			echo "<td>".$topic."</td>";
 			echo "<td>".$channel->creation_time."</td>";
 			echo "</tr>";