Changeset 26028


Ignore:
Timestamp:
12/18/13 20:59:30 (6 years ago)
Author:
mistic100
Message:

feature 1668: escape login and password in registration email

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/include/functions_user.inc.php

    r25729 r26028  
    253253             
    254254      $keyargs_content = array( 
    255         get_l10n_args('Hello %s,', $login), 
     255        get_l10n_args('Hello %s,', stripslashes($login)), 
    256256        get_l10n_args('Thank you for registering at %s!', $conf['gallery_title']), 
    257257        get_l10n_args('', ''), 
    258258        get_l10n_args('Here are your connection settings', ''), 
    259         get_l10n_args('Username: %s', $login), 
    260         get_l10n_args('Password: %s', $password), 
     259        get_l10n_args('Username: %s', stripslashes($login)), 
     260        get_l10n_args('Password: %s', stripslashes($password)), 
    261261        get_l10n_args('Email: %s', $mail_address), 
    262262        get_l10n_args('', ''), 
Note: See TracChangeset for help on using the changeset viewer.