Commit a568e1a7 authored by Robert Ricci's avatar Robert Ricci

Avoid spitting out $pid as part of an error message

It's best not to echo any form input back into the page without
cleaning it first, and in this case, it's not that important to
the message.
parent df046e91
......@@ -807,7 +807,7 @@ if (!$forwikionly) {
#
if ($ISOLATEADMINS && !$returning && count($project->GetAdmins())) {
$errors["Joining Project"] =
"You cannot join project '$pid' due to security restrictions!"
"You cannot join this project due to security restrictions!"
. " If you were told to join this project specifically, email"
. " either the project leader OR $TBMAILADDR_OPS.";
TBERROR("New user '".$formfields["joining_uid"]."' attempted to join project ".
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment