moodleform->validation() receives slashed $data now to make it similar to data_submitted() and prevent potential SQL injections

This commit is contained in:
skodak 2006-10-12 09:53:32 +00:00
parent 10b7946ff3
commit e7dcb0fccc

View File

@ -80,7 +80,7 @@ class moodleform {
if ($validated === null) {
$internal_val = $this->_form->validate();
$moodle_val = $this->validation($this->_form->exportValues(null, false));
$moodle_val = $this->validation($this->_form->exportValues(null, true));
if ($moodle_val !== true) {
if (!empty($moodle_val)) {
foreach ($moodle_val as $element=>$msg) {