Problems with "Insert Plug-in"... path wrong

Hello,
I've a problem with "Insert Plug-in" and url path in the href tag.

I have this situation.

Page A (/it/include/test-a.php) with more dynamic links from mysql database, example:
<p><a href="<?php echo($rsPages->getColumnVal("url_ita_pages")); ?>"><?php echo($rsPages->getColumnVal("name_pages")); ?></a></p>

If I open the page this is the result (correct... the "url_ita_pages" in the database is "/it/company.php"):
<p><a href="/it/company.php">COMPANY</a></p>

... but if I include (with "WA - Framework Builder - Insert Plugin-in") the above page in another with a different position (for example "/it/test-b.php") in the url I have the path of the above file (includes//), example:
<a href="includes//it/company.php">COMPANY</a>

How can I fix it?
Thanks.

Can I get a URL to reproduce the issue and FTP access? I'll have to debug the problem.

Yes, of course, see the private message.
Thanks.

It appears the issue is related to the XSS (cross site scripting) security we have added to the MySQLi getColumnVal() function.

You are returning a url from your database, and It is encoding your "/", which is preventing the framework builder from properly updating the link.

I've fixed the problem temporarily by disabling the XSS protection by updating the url reference to:

<?php echo($rsTest->getColumnVal("url_ita_pages",false)); ?>

The extra "false" argument tells it to allow reserved characters including the "/".

I'm now considering weather to stop encoding that character, update framework builder to account for that character, or leave it as it is and use the current solution when it occurs.

I'm leaning toward updating the framework builder code.

Ok, understood.
I think that a fixed directly in the core of framework builder should be better; for "large" website is very hard to change manually every single url reference (and to remember the single modify every time that is necessary update the code in the page).
Thanks!

Hi Ray,
I've downloaded the last version of the extension this morning and I saw that you have updated Framework builder code and now the urls returns correctly.
Do you confirm me that is not necessary to update manually the code with "false" but only to update "webassist/framework/framework.php" and "webassist/framework/library.php" files?
Thanks.

That is correct. I decided to update it in framework builder, so that is all that needs to be updated.