From 6324c747688d361be2016bbbdb793f2723a8d0fe Mon Sep 17 00:00:00 2001 From: mcfly Date: Sat, 16 Dec 2006 03:38:17 +0000 Subject: [PATCH] xss fix --- e107_plugins/chatbox_menu/chatbox_menu.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/e107_plugins/chatbox_menu/chatbox_menu.php b/e107_plugins/chatbox_menu/chatbox_menu.php index c8f534256..b5c752b87 100644 --- a/e107_plugins/chatbox_menu/chatbox_menu.php +++ b/e107_plugins/chatbox_menu/chatbox_menu.php @@ -11,8 +11,8 @@ | GNU General Public License (http://gnu.org). | | $Source: /cvs_backup/e107_0.8/e107_plugins/chatbox_menu/chatbox_menu.php,v $ -| $Revision: 1.1.1.1 $ -| $Date: 2006-12-02 04:34:51 $ +| $Revision: 1.2 $ +| $Date: 2006-12-16 03:38:17 $ | $Author: mcfly_e107 $ +----------------------------------------------------------------------------+ */ @@ -55,7 +55,7 @@ if(isset($_POST['chat_submit']) && $_POST['cmessage'] != "") { if((strlen(trim($cmessage)) < 1000) && trim($cmessage) != "") { - $cmessage = $tp -> toDB($cmessage, false, true); + $cmessage = $tp -> toDB($cmessage); if($sql -> db_Select("chatbox", "*", "cb_message='$cmessage' AND cb_datestamp+84600>".time())) { $emessage = CHATBOX_L17;