From d1aa49d7f8dadcbb2eb5c5706188adca7cffd02f Mon Sep 17 00:00:00 2001
From: Znote <stefan_brannfjell@live.no>
Date: Wed, 6 May 2015 00:34:52 +0200
Subject: [PATCH] 
 https://otland.net/threads/znote-aac-1-4-tfs-0-2-13-tfs-0-3-6-0-4.166722/page-49#post-2237486

---
 admin.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/admin.php b/admin.php
index da5cccb..3d23199 100644
--- a/admin.php
+++ b/admin.php
@@ -28,7 +28,7 @@ if (empty($_POST) === false) {
 			}
 			
 		} else {
-			$errors[] = 'Character '. $_POST['ban_char'] .' does not exist.';
+			$errors[] = 'Character '. getValue($_POST['ban_char']) .' does not exist.';
 		}
 	}
 	
@@ -37,9 +37,9 @@ if (empty($_POST) === false) {
 	if (empty($_POST['del_name']) === false) {
 		if (user_character_exist($_POST['del_name'])) {
 			user_delete_character(user_character_id($_POST['del_name']));
-			$errors[] = 'Character '. $_POST['del_name'] .' permanently deleted.';
+			$errors[] = 'Character '. getValue($_POST['del_name']) .' permanently deleted.';
 		} else {
-			$errors[] = 'Character '. $_POST['del_name'] .' does not exist.';
+			$errors[] = 'Character '. getValue($_POST['del_name']) .' does not exist.';
 		}
 	}
 	
@@ -55,7 +55,7 @@ if (empty($_POST) === false) {
 				} else if ($config['TFSVersion'] == 'TFS_03') {
 					user_change_password03($acc_id, $_POST['new_pass']);
 				}
-				$errors[] = 'The password to the account of character name: '. $_POST['reset_pass'] .' has been set to: '. $_POST['new_pass'] .'.';
+				$errors[] = 'The password to the account of character name: '. getValue($_POST['reset_pass']) .' has been set to: '. getValue($_POST['new_pass']) .'.';
 			} else {
 				header('Location: changepassword.php');
 				exit();
@@ -100,10 +100,10 @@ if (empty($_POST) === false) {
 						$pos = $value;
 					}
 				}
-				$errors[] = 'Character '. $_POST['position_name'] .' recieved the ingame position: '. $pos .'.';
+				$errors[] = 'Character '. getValue($_POST['position_name']) .' recieved the ingame position: '. $pos .'.';
 			}
 		} else {
-			$errors[] = 'Character '. $_POST['position_name'] .' does not exist.';
+			$errors[] = 'Character '. getValue($_POST['position_name']) .' does not exist.';
 		}
 	}