Explorar o código

Adding strip_tags see #5597

Julio Montoya %!s(int64=12) %!d(string=hai) anos
pai
achega
2b8a4ff322
Modificáronse 1 ficheiros con 3 adicións e 3 borrados
  1. 3 3
      main/admin/configure_homepage.php

+ 3 - 3
main/admin/configure_homepage.php

@@ -177,7 +177,7 @@ if (!empty($action)) {
                 if (EventsMail::check_if_using_class('portal_homepage_edited')) {              
                     EventsDispatcher::events('portal_homepage_edited',array('about_user' => api_get_user_id()));
                 }                
-                event_system(LOG_HOMEPAGE_CHANGED, 'edit_top', cut($home_top, 254), api_get_utc_datetime(), api_get_user_id());
+                event_system(LOG_HOMEPAGE_CHANGED, 'edit_top', cut(strip_tags($home_top), 254), api_get_utc_datetime(), api_get_user_id());
 				break;
 			case 'edit_notice':
 				// Filter
@@ -205,7 +205,7 @@ if (!empty($action)) {
 					fputs($fp, "<b>$notice_title</b><br />\n$notice_text");
 					fclose($fp);
 				}
-                event_system(LOG_HOMEPAGE_CHANGED, 'edit_notice', cut($notice_title, 254), api_get_utc_datetime(), api_get_user_id());
+                event_system(LOG_HOMEPAGE_CHANGED, 'edit_notice', cut(strip_tags($notice_title), 254), api_get_utc_datetime(), api_get_user_id());
 				break;
 			case 'edit_news':
 				//Filter
@@ -252,7 +252,7 @@ if (!empty($action)) {
 						}
 					}
 				}
-                event_system(LOG_HOMEPAGE_CHANGED, 'edit_news', cut($home_news, 254), api_get_utc_datetime(), api_get_user_id());
+                event_system(LOG_HOMEPAGE_CHANGED, 'edit_news', strip_tags(cut($home_news, 254)), api_get_utc_datetime(), api_get_user_id());
 				break;
 			case 'insert_tabs':
 			case 'edit_tabs':