From ee6841a12ea56db143d8fb385858eb61adbbbe07 Mon Sep 17 00:00:00 2001 From: Znote Date: Sat, 7 Jan 2017 02:47:20 +0100 Subject: [PATCH] gallery.php Title and description special chars are not escaped on output. Only on input to database in the insert function. Fixes ugly escaped text. --- gallery.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gallery.php b/gallery.php index ea5f043..9f1311b 100644 --- a/gallery.php +++ b/gallery.php @@ -23,8 +23,8 @@ if ($logged_in === true) { foreach ($images as $img) { $imageSrc = (string)$img['src']; } - $title = sanitize($_POST['title']); - $desc = sanitize($_POST['desc']); + $title = $_POST['title']; + $desc = $_POST['desc']; if ($imageSrc !== false) {