Changeset 18699 for branches/2.4

Timestamp:

Oct 19, 2012, 10:15:37 PM (12 years ago)

Author:

plg

Message:

bug 2774 fixed: better sanitize on username_or_email user input

File:

• branches/2.4/password.php (modified) (1 diff)

branches/2.4/password.php

@@ -325 +325 @@
   if (isset($_POST['username_or_email']))
   {
-    $template->assign('username_or_email', stripslashes(strip_tags($_POST['username_or_email'])));
+    $template->assign('username_or_email', htmlspecialchars(stripslashes($_POST['username_or_email'])));
   }
 }