Single quotes encoded before database data insert.

[fa-stable.git] / reporting / includes / tcpdf.php

diff --git a/reporting/includes/tcpdf.php b/reporting/includes/tcpdf.php
index 59b9ac1f302f2914d3f36af6798db23b5b103929..ba54e66a3ea08b8a96f70a25d25fb50be43c1516 100644 (file)
--- a/reporting/includes/tcpdf.php
+++ b/reporting/includes/tcpdf.php
@@ -5006,7 +5006,8 @@ if (!class_exists('TCPDF')) {
                * @access protected
                */
                function _putheader() {
-                       $this->_out('%PDF-'.$this->PDFVersion);
+                       $this->buffer = '%PDF-'.$this->PDFVersion."\n".$this->buffer;
+//                     $this->_out('%PDF-'.$this->PDFVersion);
                }
 
                /**
@@ -5728,7 +5729,7 @@ if (!class_exists('TCPDF')) {
                 */
                function unhtmlentities($text_to_convert) {
                        if (!$this->isunicode) {
-                               return html_entity_decode($text_to_convert);
+                               return html_entity_decode($text_to_convert, ENT_QUOTES);
                        }
                        return html_entity_decode_php4($text_to_convert);
                }