X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fsecurity_functions.php;h=0f34c42e88959f46dccc8be10052ac5b49556668;hb=f6fc2b9723a0554bf4f407554225e9a1a1a97e5e;hp=363bca731cd0feae1a4f11ed7a076d092c890b41;hpb=9ebbb5d10817b978a59bdb009b3f41b40fdb3c6c;p=mailer.git

diff --git a/inc/libs/security_functions.php b/inc/libs/security_functions.php
index 363bca731c..0f34c42e88 100644
--- a/inc/libs/security_functions.php
+++ b/inc/libs/security_functions.php
@@ -41,10 +41,17 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
  * Function to secure input strings
  *
  * @param	$str	The unsecured string
+ * @param	$strip	Strip tags
  * @return	$str	A (hopefully) secured string against XSS and other bad things
  */
-function secureString ($str) {
-	$str = trim(strip_tags($str));
+function secureString ($str, $strip=true) {
+	// Shall we strip HTML code?
+	if ($strip) $str = strip_tags($str);
+
+	// Trim string
+	$str = trim($str);
+
+	// Encode in entities
 	$str = htmlentities($str, ENT_QUOTES);
 	return $str;
 }