Sanitzing user input

This commit is contained in:
Lukas Reschke 2012-06-10 23:16:59 +02:00
parent f8337c9d72
commit d294373f47
1 changed files with 1 additions and 1 deletions

View File

@ -47,7 +47,7 @@ if ($_POST) {
// fill template // fill template
$tmpl = new OCP\Template( 'user_ldap', 'settings'); $tmpl = new OCP\Template( 'user_ldap', 'settings');
foreach($params as $param){ foreach($params as $param){
$value = OCP\Config::getAppValue('user_ldap', $param,''); $value = htmlentities(OCP\Config::getAppValue('user_ldap', $param,''));
$tmpl->assign($param, $value); $tmpl->assign($param, $value);
} }