I use it because many time ago have an SQL injection problem with lang file and it's reported but i see i can inject SQL code inside lang files, i know thi have to be fixed, but anyway i take my own codes to make care about some curious people in the future if exist again some bad code or any who brokes function of core code then this areas can stay protected.
I use allways on db requests or something i think can be take a risk escapes to do that.
But in some cases i use another type of code. In info i think it's unnecesary to use that but who know, i use it anyway for the reason i mentioned.
You can set a sprintf with values and then asign your urls to vars and add it on lang sprintf file and finally add it into lang file and done !!!
Only remove escape_string and all have to be fine.
I use this besides if it was my case:
In core file:
$url_AT= '<a href="http://my-bb.ir" target="_blank">AliReza_Tofighi</a>'
$url_SP = '<a href="http://community.mybb.com/user-91011.html" target="_blank">SvePu</a>';
$url_E = '<a href="http://community.mybb.com/user-84065.html" target="_blank">Eldenroot</a>'
$url_S = '<a href="https://github.com/Cu8eR/thankyou-like-plugin" target="_blank">GitHub</a>';
$info = array(
"name" => $db->escape_string($lang->tyl_info_title),
"description" => $lang->sprintf($lang->tyl_info_desc,$url_AT,$url_SP,$url_E,$url_S),
"website" => "http://www.geekplugins.com/mybb/thankyoulikesystem",
"author" => "- G33K -",
"authorsite" => "http://community.mybboard.net/user-19236.html",
"version" => "1.9.1",
"codename" => "thankyoulikesystem",
"compatibility" => "18*"
);
In lang file:
$l['tyl_info_desc'] = "Adds option for users to Thank the user for the post or Like the post.<br />*Edited for MyBB 1.8 by: {1}<br />*Maintained by: {2} and {3}<br />*Sources: {4}";
In that way you can change only source code and not the lang vars and users only traduce parts who have to be changed and not all content
See yah !!!
I think this for me can be the bet way to make the change, but you can use anything you like and test it
you can use only text and escape and before that add a new info with links.
$url_AT= '<a href="http://my-bb.ir" target="_blank">AliReza_Tofighi</a>'
$url_SP = '<a href="http://community.mybb.com/user-91011.html" target="_blank">SvePu</a>';
$url_E = '<a href="http://community.mybb.com/user-84065.html" target="_blank">Eldenroot</a>'
$url_S = '<a href="https://github.com/Cu8eR/thankyou-like-plugin" target="_blank">GitHub</a>';
$info = array(
"name" => $db->escape_string($lang->tyl_info_title),
"description" => $db->escape_string($lang->tyl_info_desc) . $lang->sprintf($lang->tyl_info_desc_url,$url_AT,$url_SP,$url_E,$url_S),
"website" => "http://www.geekplugins.com/mybb/thankyoulikesystem",
"author" => "- G33K -",
"authorsite" => "http://community.mybboard.net/user-19236.html",
"version" => "1.9.1",
"codename" => "thankyoulikesystem",
"compatibility" => "18*"
);
In lang file:
$l['tyl_info_desc'] = "Adds option for users to Thank the user for the post or Like the post.";
$l['tyl_info_desc_url'] ="<br />*Edited for MyBB 1.8 by: {1}<br />*Maintained by: {2} and {3}<br />*Sources: {4}";
Or direct on file all entire code of second arg. It's only an idea but it's what i do in your case.
See yah !!!