Thread:Extension talk:DynamicPageList (Wikimedia)/Using a sortable table/reply

You need to modify your instructions to instead do: case 'tabletitle': $startList = sprintf( '%s %s ', $startList, htmlspecialchars($arg)); break; Or this would open you up to a cross-site-scripting security vulnerability.