Add a couple of addslashes calls.

24c7327f · Leigh B. Stoller · fbbecade · 24c7327f
Commit 24c7327f authored Nov 08, 2000 by Leigh B. Stoller
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

www/newproject.php3 www/newproject.php3 +6 -0

No files found.
--- a/www/newproject.php3
+++ b/www/newproject.php3
@@ -93,6 +93,12 @@ if (strlen($proj_head_uid) > 8) {
              "Please select another.", 1);
 }

+#
+# Certain of these values must be escaped or otherwise sanitized.
+# 
+$proj_why  = addslashes($proj_why);
+$proj_name = addslashes($proj_name);
+
 #
 # This is a new project request. Make sure it does not already exist.
 #