Fixed XSS vulnerability.

1 files changed, 3 insertions, 3 deletions

diff --git a/www/functions/func_register.php b/www/functions/func_register.php
index 3cb79ad..da804d4 100755
--- a/www/functions/func_register.php
+++ b/www/functions/func_register.php
@@ -20,8 +20,8 @@ function register($db){
 		$email = "";
 	}
 
-        $safe_name =  SQLite3::escapeString("$name");
-        $safe_email =  SQLite3::escapeString("$email");
+        $safe_name =  SQLite3::escapeString(htmlentities($name));
+        $safe_email =  SQLite3::escapeString(htmlentities($email));
 
         /*Checks the validation of the registration attempt*/
 
@@ -49,7 +49,7 @@ function register($db){
 		$userid = user_id($db, $safe_name);
 
         	$_SESSION["login"] = true;
-                $_SESSION["username"] = $name;
+                $_SESSION["username"] = $safe_name;
 		$_SESSION["userid"] = $userid;
 
 		return REGISTER_SUCCESSFULL;