From fba6fb51f2782792d9f838bfe8857fde3079c3a0 Mon Sep 17 00:00:00 2001 From: "Janus B. Kristensen" Date: Mon, 15 Dec 2008 17:46:40 +0000 Subject: [PATCH] Fixes issue where sending a PM would inadvertedly strip everything that looked like tags from the text before sending it. svn path=/trunk/boinc/; revision=16689 --- html/inc/pm.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/inc/pm.inc b/html/inc/pm.inc index 53c0fc47b2..02a5a7f52d 100644 --- a/html/inc/pm.inc +++ b/html/inc/pm.inc @@ -131,7 +131,7 @@ function pm_web_line($notify) { function pm_send($to_user, $subject, $content, $send_email) { global $g_logged_in_user; $sql_subject = boinc_real_escape_string(strip_tags($subject)); - $sql_content = boinc_real_escape_string(strip_tags($content)); + $sql_content = boinc_real_escape_string($content); $mid = BoincPrivateMessage::insert("(userid, senderid, date, subject, content) VALUES ($to_user->id, $g_logged_in_user->id, UNIX_TIMESTAMP(), '$sql_subject', '$sql_content')"); if (!$mid) { error_page("Couldn't create message");