mirror of
https://github.com/phpbb/phpbb.git
synced 2025-05-02 13:47:55 +02:00
Escape the group name to prevent a few common support issues
NB: We still allow HTML in group names because some administrators use it (this is designed behaviour) git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@5495 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
70722f5c45
commit
722fbae7c0
@ -250,7 +250,7 @@ else if ( isset($HTTP_POST_VARS['group_update']) )
|
||||
else
|
||||
{
|
||||
$group_type = isset($HTTP_POST_VARS['group_type']) ? intval($HTTP_POST_VARS['group_type']) : GROUP_OPEN;
|
||||
$group_name = isset($HTTP_POST_VARS['group_name']) ? trim($HTTP_POST_VARS['group_name']) : '';
|
||||
$group_name = isset($HTTP_POST_VARS['group_name']) ? htmlspecialchars(trim($HTTP_POST_VARS['group_name'])) : '';
|
||||
$group_description = isset($HTTP_POST_VARS['group_description']) ? trim($HTTP_POST_VARS['group_description']) : '';
|
||||
$group_moderator = isset($HTTP_POST_VARS['username']) ? $HTTP_POST_VARS['username'] : '';
|
||||
$delete_old_moderator = isset($HTTP_POST_VARS['delete_old_moderator']) ? true : false;
|
||||
|
Loading…
x
Reference in New Issue
Block a user