avoid rather nasty potential XSS vulnerability

This commit is contained in:
real_nowhereman 2010-09-05 13:14:51 +00:00
parent 9b5afb0f7e
commit bea964e517

View File

@ -97,8 +97,8 @@
$name = $user['userid'];
} else {
$name = trim(stripslashes(@$_POST['name']));
$email = isset($_POST['email'])? trim($_POST['email']) : null;
$name = trim(htmlspecialchars(@$_POST['name']));
$email = isset($_POST['email'])? trim(htmlspecialchars($_POST['email'])) : null;
$url = isset($_POST['url'])? trim(stripslashes(htmlspecialchars($_POST['url']))) : null;
/*