$root=$xml->createElement("EventList");
if(count($all)>0)
foreach($all as $k => $ev){
- $nod=$xml->createElement("Event",$ev["title"]);
+ $nod=$xml->createElement("Event",htmlentities($ev["title"]));
$nod->setAttribute("id",$ev["eventid"]);
$nod->setAttribute("start",$ev["starttime"]);
$root->appendChild($nod);
$nod->setAttribute("capacity",$ev->getCapacity());
$nod->setAttribute("defaultprice",$ev->getDefaultPrice());
$nod->setAttribute("cancelled",$ev->isCancelled()?"true":"false");
- $nod->appendChild($xml->createElement("Title",$ev->getTitle()));
- $nod->appendChild($xml->createElement("Artist",$ev->getArtist()));
- $nod->appendChild($xml->createElement("Room",$ev->getRoomId()));
- $nod->appendChild($xml->createElement("Description",$ev->getDescription()));
+ $nod->appendChild($xml->createElement("Title",htmlentities($ev->getTitle())));
+ $nod->appendChild($xml->createElement("Artist",htmlentities($ev->getArtist())));
+ $nod->appendChild($xml->createElement("Room",htmlentities($ev->getRoomId())));
+ $nod->appendChild($xml->createElement("Description",htmlentities($ev->getDescription())));
if($ev->isCancelled())
$nod->appendChild($xml->createElement("CancelReason",$ev->getCancelReason()));
$root->appendChild($nod);