diff options
Diffstat (limited to 'mod')
| -rw-r--r-- | mod/item.php | 2 | ||||
| -rw-r--r-- | mod/settings.php | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/mod/item.php b/mod/item.php index dc005bb20..2feb64a37 100644 --- a/mod/item.php +++ b/mod/item.php @@ -269,7 +269,7 @@ function item_post(&$a) { $coord = $orig_post['coord']; $verb = $orig_post['verb']; $app = $orig_post['app']; - $title = escape_tags(trim($_REQUEST['title'])); + $title = $_REQUEST['title']; $body = $_REQUEST['body']; $private = $orig_post['item_private']; $item_flags = $orig_post['item_flags']; diff --git a/mod/settings.php b/mod/settings.php index e9f4c9f8d..b88380ff0 100644 --- a/mod/settings.php +++ b/mod/settings.php @@ -261,7 +261,7 @@ function settings_post(&$a) { $maxreq = ((x($_POST,'maxreq')) ? intval($_POST['maxreq']) : 0); $expire = ((x($_POST,'expire')) ? intval($_POST['expire']) : 0); $def_group = ((x($_POST,'group-selection')) ? notags(trim($_POST['group-selection'])) : ''); - $channel_menu = ((x($_POST['channel_menu'])) ? htmlspecialchars_decode(trim($_POST['channel_menu'])) : ''); + $channel_menu = ((x($_POST['channel_menu'])) ? htmlspecialchars_decode(trim($_POST['channel_menu']),ENT_QUOTES) : ''); $expire_items = ((x($_POST,'expire_items')) ? intval($_POST['expire_items']) : 0); $expire_starred = ((x($_POST,'expire_starred')) ? intval($_POST['expire_starred']) : 0); |