From 752ba555a841833edb0621a320de542cc9064b0d Mon Sep 17 00:00:00 2001
From: frederik <frederik.slos@gmail.com>
Date: Tue, 23 Apr 2024 19:25:45 +0200
Subject: [PATCH] make sure we get quotes back

---
 scripts/play.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/play.php b/scripts/play.php
index a9e9106..34340af 100644
--- a/scripts/play.php
+++ b/scripts/play.php
@@ -133,7 +133,7 @@ if(isset($_GET['bydate'])){
 
   #Specific Species
 } elseif(isset($_GET['species'])) {
-  $species = $_GET['species'];
+  $species = htmlspecialchars_decode($_GET['species'], ENT_QUOTES);
   session_start();
   $_SESSION['species'] = $species;
   $statement = $db->prepare("SELECT * FROM detections WHERE Com_Name == \"$species\" ORDER BY Com_Name");
@@ -394,7 +394,7 @@ if ($fp) {
   $disk_check_exclude_arr = [];
 }
 
-$name = $_GET['species'];
+$name = htmlspecialchars_decode($_GET['species'], ENT_QUOTES);
 if(isset($_SESSION['date'])) {
   $date = $_SESSION['date'];
   if(isset($_GET['sort']) && $_GET['sort'] == "confidence") {