replaced strip_tags() by htmlspecialchars() in most of POST variables
added stripslashes() to POST variables while form is not sent
This commit is contained in:
1 parent
9bae4628a0
commit
5899fffb29
4 files changed
+49
-54
No files matched your search
@@ -16,7 +16,7 @@
|
||||
|
||||
<div class="row">
|
||||
<div class="tc1 post_content tc4" style="height: 150px">
|
||||
<?= BBCode($this->TPL['preview']); ?>
|
||||
<?= BBCode($this->TPL['post']); ?>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
Reference in new issue
Block a user