From 00de0ce0817f36b5acba70362a4c30c8fa7aaf11 Mon Sep 17 00:00:00 2001 From: Cassio de Campos Date: Mon, 31 Jul 2017 20:29:41 +0100 Subject: sanitising --- src/fclar.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/fclar.php') diff --git a/src/fclar.php b/src/fclar.php index 39084bc..fd99c53 100644 --- a/src/fclar.php +++ b/src/fclar.php @@ -255,7 +255,7 @@ function DBNewClar($param,$c=null) { MSGError("DBNewClar param error: $key is not numeric"); return false; } - $$key = sanitizeText($param[$key]); + $$key = myhtmlspecialchars($param[$key]); } $t = time(); $clarnumber=-1; @@ -269,7 +269,7 @@ function DBNewClar($param,$c=null) { $clarstatus='openclar'; foreach($ac1 as $key) { if(isset($param[$key])) { - $$key = sanitizeText($param[$key]); + $$key = myhtmlspecialchars($param[$key]); if(isset($type[$key]) && !is_numeric($param[$key])) { MSGError("DBNewClar param error: $key is not numeric"); return false; -- cgit v1.2.3