Fix #133 - Striplslashes that are not needed for prepared statements

armadito · Dec 13, 2016 · 700e6eb · 700e6eb
1 parent b2f165f
commit 700e6eb
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/inc/scanconfig.class.php b/inc/scanconfig.class.php
@@ -44,9 +44,9 @@ function initFromForm($POST)
         }
 
         $this->antivirus_id = $POST["antivirus_id"];
-        $this->scan_name    = $POST["scan_name"];
-        $this->scan_path    = $POST["scan_path"];
-        $this->scan_options = $POST["scan_options"];
+        $this->scan_name    = Toolbox::stripslashes_deep($POST["scan_name"]);
+        $this->scan_path    = Toolbox::stripslashes_deep($POST["scan_path"]);
+        $this->scan_options = Toolbox::stripslashes_deep($POST["scan_options"]);
     }
 
     function initFromDB($id)