list ($atime, $author, $message) = explode("\t", $line, 3);
list ($author) = explode(' ', $author); # first name only
printf('<li>%s <small class="date">%s • %s</small></li>'."\n",
- $message, $author, strftime('%F %H:%M', $atime)
+ htmlspecialchars($message),
+ htmlspecialchars($author), strftime('%F %H:%M', $atime)
);
$lines++;
}