From 600e35ca3399ee75492e7fc454781a68aab3fb48 Mon Sep 17 00:00:00 2001
From: Matt Mullenweg <matt@git.wordpress.org>
Date: Sat, 12 Feb 2005 01:50:27 +0000
Subject: [PATCH] http://mosquito.wordpress.org/view.php?id=431

git-svn-id: https://develop.svn.wordpress.org/trunk@2278 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/upload.php | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/wp-admin/upload.php b/wp-admin/upload.php
index 93668667c1..3e2b4da25a 100644
--- a/wp-admin/upload.php
+++ b/wp-admin/upload.php
@@ -195,14 +195,12 @@ die();
         }
     }
 
+if ( ereg('image/',$img1_type) )
+	$piece_of_code = "<img src=';". get_settings('fileupload_url') ."/$img1_name' alt='$imgdesc' />";
+else
+	$piece_of_code = "<a href='". get_settings('fileupload_url') . "/$img1_name' title='$imgdesc'>$imgdesc</a>";
 
-
-if ( ereg('image/',$img1_type)) {
-    $piece_of_code = "&lt;img src=&quot;". get_settings('fileupload_url') ."/$img1_name&quot; alt=&quot;$imgdesc&quot; /&gt;";
-} else {
-    $piece_of_code = "&lt;a href=&quot;". get_settings('fileupload_url') . "/$img1_name&quot; title=&quot;$imgdesc&quot; &gt;$imgdesc&lt;/a&gt;";
-};
-
+$piece_of_code = htmlspecialchars( $piece_of_code );
 ?>
 
 <h3><?php _e('File uploaded!') ?></h3>