--- nfo/php/libs/com.newsblob.phphtmllib/widgets/TextCSSNav.inc	2003/01/30 03:29:44	1.1
+++ nfo/php/libs/com.newsblob.phphtmllib/widgets/TextCSSNav.inc	2003/11/14 21:30:57	1.4
@@ -3,7 +3,7 @@
 /**
  * This contains the TextNav widget
  *
- * $Id: TextCSSNav.inc,v 1.1 2003/01/30 03:29:44 jonen Exp $
+ * $Id: TextCSSNav.inc,v 1.4 2003/11/14 21:30:57 jonen Exp $
  *
  * @author Walter A. Boring IV <waboring@buildabetterweb.com>
  * @package phpHtmlLib
@@ -69,7 +69,7 @@
 	 * @return string the raw html output.
      */
     function render( $indent_level=1, $output_debug=0) {
-		$this->_selected = $_REQUEST[$this->_query_prefix."textcssnavselected"];
+		$this->_selected = @$_REQUEST[$this->_query_prefix."textcssnavselected"];
 		$div = html_div("textnav", $this->_build_links());
         return $div->render( $indent_level, $output_debug );
     }
@@ -176,7 +176,7 @@
 					}
 					$url .= "&".$this->_query_prefix."textcssnavselected=".$cnt;
 				}
-				$obj = html_a($url, $nav["text"], "", $nav["target"], $nav["title"]);
+				$obj = html_a(htmlentities($url), $nav["text"], "", $nav["target"], $nav["title"]);
                 if ($class != NULL) {
 					if ($this->_highlight_selected && $this->_selected == $cnt) {
 						$class = "selected".$class;