From a9921788830fa1c7572a2ce83e355205ff9ec868 Mon Sep 17 00:00:00 2001 From: Chris Morgan Date: Sat, 6 Jan 2007 05:30:31 +0000 Subject: [PATCH] Fix filtering of html, we shouldn't be running htmlspecialchars() on html code that needs to be preserved without modification --- include/filter.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/filter.php b/include/filter.php index 921e990..ddf30d8 100644 --- a/include/filter.php +++ b/include/filter.php @@ -52,7 +52,7 @@ function filter_gpc() switch($aKeys[$i][1]) { case "h": // HTML string - $aClean[$aKeys[$i]] = trim(htmlspecialchars($_REQUEST[$aKeys[$i]])); + $aClean[$aKeys[$i]] = trim($_REQUEST[$aKeys[$i]]); // if there is no content and no image, make the variable empty if(strip_tags($aClean[$aKeys[$i]],'')=="") $aClean[$aKeys[$i]] = "";