Fixed XSS vulnerability.

1 files changed, 1 insertions, 1 deletions

diff --git a/www/functions/func_login.php b/www/functions/func_login.php
index d909180..7944c3e 100755
--- a/www/functions/func_login.php
+++ b/www/functions/func_login.php
@@ -4,7 +4,7 @@ function login($db){
         /*___Database Query: Login___*/
 	$username = $_POST["username"];
         $password = $_POST["password"];
-        $safe_username = SQLite3::escapeString("$username");
+        $safe_username = SQLite3::escapeString(htmlentities($username));
 
 	$log_in = false;
 	$real_password = "";