Add validation and 'htmlspecialchars' to keep Teun from breaking stuff

This commit is contained in:
Mark Schouten 2014-05-26 12:04:24 +02:00
parent 858830915f
commit b457495426
3 changed files with 20 additions and 0 deletions

View file

@ -21,6 +21,7 @@ function get_all_users() {
$r = $db->query('SELECT id, emailaddress, isadmin FROM users');
$ret = array();
while ($row = $r->fetchArray()) {
$row['emailaddress'] = htmlspecialchars($row['emailaddress']);
array_push($ret, $row);
}