replaced strip_tags() by htmlspecialchars() in most of POST variables

added stripslashes() to POST variables while form is not sent
2015-02-15 22:42:46 +01:00
parent 9bae4628a0
commit 5899fffb29
4 changed files with 49 additions and 54 deletions
@@ -16,7 +16,7 @@
 		
 			<div class="row">
 				<div class="tc1 post_content tc4" style="height: 150px">
-					<?= BBCode($this->TPL['preview']); ?>
+					<?= BBCode($this->TPL['post']); ?>
 				</div>
 			</div>
 		</div>