Escape request and database values in forms and links.
Add form_value() in html.lib.php.
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
<?php
|
||||
$result = get_post_data(TRUE, TRUE);
|
||||
$result = get_post_data(TRUE);
|
||||
extract($result[0], EXTR_OVERWRITE);
|
||||
|
||||
if (isset($_POST['g-recaptcha-response'])) {
|
||||
|
||||
Reference in New Issue
Block a user