From d7ad69e66501a11d20cc821fa774e1906a542390 Mon Sep 17 00:00:00 2001
From: Starbeamrainbowlabs <sbrl@starbeamrainbowlabs.com>
Date: Sat, 18 Apr 2020 12:41:24 +0100
Subject: [PATCH] moar htmlentities

---
 modules/feature-comments.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/feature-comments.php b/modules/feature-comments.php
index 642de23..85d8742 100644
--- a/modules/feature-comments.php
+++ b/modules/feature-comments.php
@@ -38,7 +38,7 @@ register_module([
 			if(!$env->is_logged_in) {
 				http_response_code(401);
 				exit(page_renderer::render_main("Error posting comment - $settings->sitename", "<p>Your comment couldn't be posted because you're not logged in. You can login <a href='?action=index'>here</a>. Here's the comment you tried to post:</p>
-				<textarea readonly>$message</textarea>"));
+				<textarea readonly>".htmlentities($message)."</textarea>"));
 			}
 			
 			$message_length = strlen($message);