create method for savely printing text

app/Utils.inc

@@ -19,6 +19,33 @@
 	 */
 	class Utils
 	{
+		
+		
+		/**
+		 * Mask HTML-chars for save output.
+		 * 
+		 * @static
+		 * @param	string	$string	String to be masked
+		 * @return	string		Masked string
+		 */
+		static function t($string)
+		{
+			return nl2br(htmlspecialchars($string));
+		}
+		
+		
+		/**
+		 * ‚htmlspecialchars‘ with support for UTF-8.
+		 * 
+		 * @static
+		 * @param	string	$string	String to be masked
+		 * @return	string		Masked string
+		 */
+		public static function htmlspecialchars_utf8($string)
+		{
+			return htmlspecialchars($string, ENT_COMPAT, 'UTF-8');
+		}
+		
 	}
 
 ?>

views/html/questgroups/questgroup.tpl

@@ -6,7 +6,7 @@
 
 <h3><?=$questgroupshierarchy['title_singular']?> <?=$questgroup['pos']?>: <?=$questgroup['title']?></h3>
 <?php foreach($texts as &$text) : ?>
-<p><?=$text['text']?></p>
+<p><?=\hhu\z\Utils::t($text['text'])?></p>
 <?php endforeach ?>
 
 <?php foreach($childquestgroupshierarchy as &$hierarchy) : ?>

views/html/quests/quest.tpl

@@ -10,7 +10,7 @@
 <?php endif ?>
 <section>
 	<h1><?=$questtext['type']?></h1>
-	<p><?=$questtext['text']?></p>
+	<p><?=\hhu\z\Utils::t($questtext['text'])?></p>
 	
 	<?php if(!empty($questtext['sidequests'])) : ?>
 	<ul>
@@ -35,6 +35,6 @@
 <?php if($showtask) : ?>
 <section>
 	<h1><?=_('Task')?></h1>
-	<p><?=$quest['task']?></p>
+	<p><?=\hhu\z\Utils::t($quest['task'])?></p>
 </section>
 <?php endif ?>

views/html/quests/sidequest.tpl

@@ -12,7 +12,7 @@
 <?php endif ?>
 <section>
 	<h1><?=$sidequesttext['type']?></h1>
-	<p><?=$sidequesttext['text']?></p>
+	<p><?=\hhu\z\Utils::t($sidequesttext['text'])?></p>
 	
 	<?php if(!empty($sidequesttext['out_text'])) : ?>
 	<?php if(!empty($sidequesttext['abort_text'])) : ?>
@@ -33,6 +33,6 @@
 <?php if($showtask) : ?>
 <section>
 	<h1><?=_('Task')?></h1>
-	<p><?=$sidequest['task']?></p>
+	<p><?=\hhu\z\Utils::t(($sidequest['task'])?></p>
 </section>
 <?php endif ?>

views/html/seminaries/seminary.tpl

@@ -11,7 +11,7 @@
 	<?=sprintf(_('created by %s on %s'), $seminary['creator']['username'],  $dateFormatter->format(new \DateTime($seminary['created'])))?>
 </p>
 <h3>Beschreibung</h3>
-<p><?=$seminary['description']?></p>
+<p><?=\hhu\z\Utils::t($seminary['description'])?></p>
 
 <?php foreach($questgroupshierarchy as &$hierarchy) : ?>
 <h3><?=$hierarchy['title_plural']?></h3>