mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-28 06:08:52 +00:00
Minor change ... don't strip_tags ... I don't think this is a security issue but it could use checking ... everyone be aware of my being unsure before using this!
git-svn-id: file:///svn/phpbb/trunk@2406 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
f12976b7a0
commit
22d0fa9e3f
1 changed files with 2 additions and 2 deletions
|
@ -66,7 +66,7 @@ if ( $result = $db->sql_query($sql) )
|
||||||
|
|
||||||
if ( !empty($HTTP_POST_VARS['subject']) )
|
if ( !empty($HTTP_POST_VARS['subject']) )
|
||||||
{
|
{
|
||||||
$subject = trim(strip_tags(stripslashes($HTTP_POST_VARS['subject'])));
|
$subject = trim(stripslashes($HTTP_POST_VARS['subject']));
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
@ -76,7 +76,7 @@ if ( $result = $db->sql_query($sql) )
|
||||||
|
|
||||||
if ( !empty($HTTP_POST_VARS['message']) )
|
if ( !empty($HTTP_POST_VARS['message']) )
|
||||||
{
|
{
|
||||||
$message = trim(strip_tags(stripslashes($HTTP_POST_VARS['message'])));
|
$message = trim(stripslashes($HTTP_POST_VARS['message']));
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
|
|
Loading…
Add table
Reference in a new issue