feature 1668: escape login and password in registration email

git-svn-id: http://piwigo.org/svn/trunk@26028 68402e56-0260-453c-a942-63ccdbb3a9ee
Piwigo · Dec 18, 2013 · 6e91ec5 · 6e91ec5
1 parent 81e0958
commit 6e91ec5
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/include/functions_user.inc.php b/include/functions_user.inc.php
@@ -252,12 +252,12 @@ function register_user($login, $password, $mail_address, $notify_admin=true, &$e
       include_once(PHPWG_ROOT_PATH.'include/functions_mail.inc.php');
 
       $keyargs_content = array(
-        get_l10n_args('Hello %s,', $login),
+        get_l10n_args('Hello %s,', stripslashes($login)),
         get_l10n_args('Thank you for registering at %s!', $conf['gallery_title']),
         get_l10n_args('', ''),
         get_l10n_args('Here are your connection settings', ''),
-        get_l10n_args('Username: %s', $login),
-        get_l10n_args('Password: %s', $password),
+        get_l10n_args('Username: %s', stripslashes($login)),
+        get_l10n_args('Password: %s', stripslashes($password)),
         get_l10n_args('Email: %s', $mail_address),
         get_l10n_args('', ''),
         get_l10n_args('If you think you\'ve received this email in error, please contact us at %s', get_webmaster_mail_address()),