Please sign in to comment.
Escaping the email in register.php. This isn't actually required as i…
…f is_valid_email() returns false the query will not be ran, and is_valid_email() will not validate an email that contains a single quote. I decided to escape this anyway for consistency, and if nothing else, others using the code may not realize that is_valid_email must not allow single quotes for security reasons.
- Loading branch information...