Add filtering to protect against XSS attacks

2014-01-12 05:34:55 +00:00 · 2014-01-12 05:34:55 +00:00 · cd6be42526
parent 712593096a
commit cd6be42526
1 changed files with 3 additions and 3 deletions
--- a/src/psm/Module/Servers.class.php
+++ b/src/psm/Module/Servers.class.php
@ -181,9 +181,9 @@ class Servers extends Core {
 		// check for add/edit mode
 		if (isset($_POST['label']) && isset($_POST['ip']) && isset($_POST['port'])) {
 			$clean = array(
-				'label' => $_POST['label'],
-				'ip' => $_POST['ip'],
-				'port' => $_POST['port'],
+				'label' => strip_tags($_POST['label']),
+				'ip' => strip_tags($_POST['ip']),
+				'port' => strip_tags($_POST['port']),
 				'type' => $_POST['type'],
 				'active' => $_POST['active'],
 				'email' => $_POST['email'],