From 00de0ce0817f36b5acba70362a4c30c8fa7aaf11 Mon Sep 17 00:00:00 2001
From: Cassio de Campos <cassiopc@gmail.com>
Date: Mon, 31 Jul 2017 20:29:41 +0100
Subject: sanitising

---
 src/fanswer.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/fanswer.php')

diff --git a/src/fanswer.php b/src/fanswer.php
index c53843d..8f2c95b 100644
--- a/src/fanswer.php
+++ b/src/fanswer.php
@@ -63,7 +63,7 @@ function DBDeleteAnswer($contest,$param,$c=null) {
 	$ac=array('number');
 	foreach($ac as $key) {
 		if(!isset($param[$key])) return false;
-		$$key = sanitizeText($param[$key]);
+		$$key = myhtmlspecialchars($param[$key]);
 	}
 
 	$cw = false;
@@ -106,7 +106,7 @@ function DBNewAnswer($contest, $param, $c=null) {
 			MSGError("DBNewAnswer param error: $key is not set");
 			return false;
 		}
-		$$key = sanitizeText($param[$key]);
+		$$key = myhtmlspecialchars($param[$key]);
 		if(isset($type[$key]) && !is_numeric($param[$key])) {
 			MSGError("DBNewAnswer param error: $key is not numeric");
 			return false;
-- 
cgit v1.2.3