Update pw_forgot.php

#84 XSS Prevention
andreas83 · Mar 23, 2017 · 1b0799d · 1b0799d
1 parent 207efcd
commit 1b0799d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/template/pw_forgot.php b/app/template/pw_forgot.php
@@ -1,6 +1,6 @@
 <?php
 include("header.php");
-$mail=(isset($_POST['mail']) ? $_POST['mail'] : "" );
+$mail=(isset($_POST['mail']) && filter_var($_POST['mail'], FILTER_VALIDATE_EMAIL) ? $_POST['mail'] : "" );
 
 ?>
 <div class="container">