Changeset 26028


Ignore:
Timestamp:
Dec 18, 2013, 8:59:30 PM (7 years ago)
Author:
mistic100
Message:

feature 1668: escape login and password in registration email

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/include/functions_user.inc.php

    r25729 r26028  
    253253           
    254254      $keyargs_content = array(
    255         get_l10n_args('Hello %s,', $login),
     255        get_l10n_args('Hello %s,', stripslashes($login)),
    256256        get_l10n_args('Thank you for registering at %s!', $conf['gallery_title']),
    257257        get_l10n_args('', ''),
    258258        get_l10n_args('Here are your connection settings', ''),
    259         get_l10n_args('Username: %s', $login),
    260         get_l10n_args('Password: %s', $password),
     259        get_l10n_args('Username: %s', stripslashes($login)),
     260        get_l10n_args('Password: %s', stripslashes($password)),
    261261        get_l10n_args('Email: %s', $mail_address),
    262262        get_l10n_args('', ''),
Note: See TracChangeset for help on using the changeset viewer.