Merge pull request #462 from Exileum/bugfix/privmsg_clean_username

Fix multiple variable cleanup in private messaging
torrentpier · Jun 24, 2018 · 5078ed6 · 5078ed6
2 parents 7414716 + 194e697
commit 5078ed6
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/privmsg.php b/privmsg.php
@@ -779,9 +779,7 @@
 
     if ($submit) {
         if (!empty($_POST['username'])) {
-            $to_username = clean_username($_POST['username']);
-            $to_username_sql = DB()->escape($to_username);
-            $to_userdata = get_userdata($to_username_sql);
+            $to_userdata = get_userdata($_POST['username']);
 
             if (!$to_userdata || $to_userdata['user_id'] == GUEST_UID) {
                 $error = true;