Add a couple of addslashes calls.

www/newproject.php3

@@ -93,6 +93,12 @@ if (strlen($proj_head_uid) > 8) {
               "Please select another.", 1);
 }
 
+#
+# Certain of these values must be escaped or otherwise sanitized.
+# 
+$proj_why  = addslashes($proj_why);
+$proj_name = addslashes($proj_name);
+
 #
 # This is a new project request. Make sure it does not already exist.
 #