diff options
| author | Paul S. Owen <psotfx@users.sourceforge.net> | 2002-03-22 19:32:35 +0000 |
|---|---|---|
| committer | Paul S. Owen <psotfx@users.sourceforge.net> | 2002-03-22 19:32:35 +0000 |
| commit | 22d0fa9e3f2e41fa379ced61356f8fc9e5721ff4 (patch) | |
| tree | 4218fc1a6616bf3758afe2545fb60cb8d7c9db89 /phpBB | |
| parent | f12976b7a03d309fa3dcda5325882b33326defc6 (diff) | |
| download | forums-22d0fa9e3f2e41fa379ced61356f8fc9e5721ff4.tar forums-22d0fa9e3f2e41fa379ced61356f8fc9e5721ff4.tar.gz forums-22d0fa9e3f2e41fa379ced61356f8fc9e5721ff4.tar.bz2 forums-22d0fa9e3f2e41fa379ced61356f8fc9e5721ff4.tar.xz forums-22d0fa9e3f2e41fa379ced61356f8fc9e5721ff4.zip | |
Minor change ... don't strip_tags ... I don't think this is a security issue but it could use checking ... everyone be aware of my being unsure before using this!
git-svn-id: file:///svn/phpbb/trunk@2406 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB')
| -rw-r--r-- | phpBB/includes/usercp_email.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/phpBB/includes/usercp_email.php b/phpBB/includes/usercp_email.php index 688adaec0d..1ffcf6be71 100644 --- a/phpBB/includes/usercp_email.php +++ b/phpBB/includes/usercp_email.php @@ -66,7 +66,7 @@ if ( $result = $db->sql_query($sql) ) if ( !empty($HTTP_POST_VARS['subject']) ) { - $subject = trim(strip_tags(stripslashes($HTTP_POST_VARS['subject']))); + $subject = trim(stripslashes($HTTP_POST_VARS['subject'])); } else { @@ -76,7 +76,7 @@ if ( $result = $db->sql_query($sql) ) if ( !empty($HTTP_POST_VARS['message']) ) { - $message = trim(strip_tags(stripslashes($HTTP_POST_VARS['message']))); + $message = trim(stripslashes($HTTP_POST_VARS['message'])); } else { |