moodleform->validation() receives slashed $data now to make it similar to data_submitted() and prevent potential SQL injections

2006-10-12 09:53:32 +00:00
parent 10b7946ff3
commit e7dcb0fccc
1 changed files with 1 additions and 1 deletions
@@ -80,7 +80,7 @@ class moodleform {

        if ($validated === null) {
            $internal_val = $this->_form->validate();
-            $moodle_val = $this->validation($this->_form->exportValues(null, false));
+            $moodle_val = $this->validation($this->_form->exportValues(null, true));
            if ($moodle_val !== true) {
                if (!empty($moodle_val)) {
                    foreach ($moodle_val as $element=>$msg) {