diff options
Diffstat (limited to 'phpBB/includes/ucp/ucp_main.php')
| -rw-r--r-- | phpBB/includes/ucp/ucp_main.php | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/phpBB/includes/ucp/ucp_main.php b/phpBB/includes/ucp/ucp_main.php index 4a98ea2829..f236f5dd9d 100644 --- a/phpBB/includes/ucp/ucp_main.php +++ b/phpBB/includes/ucp/ucp_main.php @@ -687,9 +687,8 @@ class ucp_main extends module if ($submit && $edit) { - $draft_subject = preg_replace('#&(\#[0-9]+;)#', '&\1', request_var('subject', '')); - $draft_message = (isset($_POST['message'])) ? htmlspecialchars(trim(str_replace(array('\\\'', '\\"', '\\0', '\\\\'), array('\'', '"', '\0', '\\'), $_POST['message']))) : ''; - $draft_message = preg_replace('#&(\#[0-9]+;)#', '&\1', $draft_message); + $draft_subject = request_var('subject', '', true); + $draft_message = request_var('message', '', true); if ($draft_message && $draft_subject) { |
