mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-02 23:07:39 +02:00
Minor change ... don't strip_tags ... I don't think this is a security issue but it could use checking ... everyone be aware of my being unsure before using this!
git-svn-id: file:///svn/phpbb/trunk@2406 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -66,7 +66,7 @@ if ( $result = $db->sql_query($sql) )
|
|||||||
|
|
||||||
if ( !empty($HTTP_POST_VARS['subject']) )
|
if ( !empty($HTTP_POST_VARS['subject']) )
|
||||||
{
|
{
|
||||||
$subject = trim(strip_tags(stripslashes($HTTP_POST_VARS['subject'])));
|
$subject = trim(stripslashes($HTTP_POST_VARS['subject']));
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
@@ -76,7 +76,7 @@ if ( $result = $db->sql_query($sql) )
|
|||||||
|
|
||||||
if ( !empty($HTTP_POST_VARS['message']) )
|
if ( !empty($HTTP_POST_VARS['message']) )
|
||||||
{
|
{
|
||||||
$message = trim(strip_tags(stripslashes($HTTP_POST_VARS['message'])));
|
$message = trim(stripslashes($HTTP_POST_VARS['message']));
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
Reference in New Issue
Block a user