@@ -31,8 +31,8 @@ public function render()
3131 {
3232 $ ret = '' ;
3333 $ ele_name = $ this ->getName ();
34- $ ele_title = $ this ->getTitle ();
35- $ ele_value = $ this ->getValue ();
34+ $ ele_title = ( string ) $ this ->getTitle ();
35+ $ ele_value = ( string ) $ this ->getValue ();
3636 $ ele_options = $ this ->getOptions ();
3737 $ ele_extra = $ this ->getExtra ();
3838 $ ele_delimeter = empty ($ this ->columns ) ? $ this ->getDelimeter () : '' ;
@@ -41,6 +41,12 @@ public function render()
4141 }
4242 $ i = 0 ;
4343 $ id_ele = 0 ;
44+ if ('' != $ ele_title ) {
45+ $ ele_title = htmlspecialchars ($ ele_title , ENT_QUOTES );
46+ }
47+ if ('' != $ ele_value ) {
48+ $ ele_value = htmlspecialchars ($ ele_value , ENT_QUOTES );
49+ }
4450 foreach ($ ele_options as $ value => $ name ) {
4551 ++$ id_ele ;
4652 if (!empty ($ this ->columns )) {
@@ -49,7 +55,7 @@ public function render()
4955 }
5056 $ ret .= '<td class="radio"> ' ;
5157 }
52- $ ret .= '<input type="radio" name=" ' . $ ele_name . '" id=" ' . $ ele_name . '[ ' . $ value . '] ' . $ id_ele . '" title = " ' . htmlspecialchars (( string ) $ ele_title, ENT_QUOTES ) . '" value=" ' . htmlspecialchars ( $ value , ENT_QUOTES ) . '" ' ;
58+ $ ret .= '<input type="radio" name=" ' . $ ele_name . '" id=" ' . $ ele_name . '[ ' . $ value . '] ' . $ id_ele . '" title = " ' . $ ele_title . '" value=" ' . $ ele_value . '" ' ;
5359 if (isset ($ ele_value ) && $ value == $ ele_value ) {
5460 $ ret .= ' checked ' ;
5561 }
0 commit comments