Changeset 18700

Timestamp:

Oct 19, 2012, 10:16:52 PM (12 years ago)

Author:

plg

Message:

merge r18699 from branch 2.4 to trunk

bug 2774 fixed: better sanitize on username_or_email user input

File:

• trunk/password.php (modified) (1 diff)

trunk/password.php

@@ -327 +327 @@
   if (isset($_POST['username_or_email']))
   {
-    $template->assign('username_or_email', stripslashes(strip_tags($_POST['username_or_email'])));
+    $template->assign('username_or_email', htmlspecialchars(stripslashes($_POST['username_or_email'])));
   }
 }