From f4091f8e3731704e6b36e8c8a3cff5481c1e9ff8 Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Thu, 2 Sep 2010 18:42:29 +0000 Subject: [PATCH] MDL-23184 chat supports html only input --- mod/chat/gui_basic/index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mod/chat/gui_basic/index.php b/mod/chat/gui_basic/index.php index 03dc56559af..61bc84c3021 100644 --- a/mod/chat/gui_basic/index.php +++ b/mod/chat/gui_basic/index.php @@ -5,7 +5,7 @@ require_once('../lib.php'); $id = required_param('id', PARAM_INT); $groupid = optional_param('groupid', 0, PARAM_INT); // only for teachers -$message = optional_param('message', '', PARAM_CLEAN); +$message = optional_param('message', '', PARAM_CLEANHTML); $refresh = optional_param('refresh', '', PARAM_RAW); // force refresh $last = optional_param('last', 0, PARAM_INT); // last time refresh or sending $newonly = optional_param('newonly', 0, PARAM_BOOL); // show only new messages