X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fsponsor_functions.php;h=7606738e22c41b0ecc2f6e7eac8abc4ace5d0473;hb=62b4ef5bb0b63f7cac5f0dccd816246a108a5d83;hp=51d3510e97c238cb4cb390f9a323226289d4f159;hpb=9afd6ec5878544a7982c50ed9c0dd7de37606d5b;p=mailer.git

diff --git a/inc/libs/sponsor_functions.php b/inc/libs/sponsor_functions.php
index 51d3510e97..7606738e22 100644
--- a/inc/libs/sponsor_functions.php
+++ b/inc/libs/sponsor_functions.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 04/23/2005 *
- * ===============                              Last change: 05/18/2008 *
+ * Mailer v0.2.1-FINAL                                Start: 04/23/2005 *
+ * ===================                          Last change: 05/18/2008 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : sponsor_functions.php                            *
@@ -175,10 +175,12 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
 				$OUT = '';
 				foreach ($postData as $k => $v) {
 					// Do not add 'force' !
-					if ($k != "force") {
-						$OUT .= "<input type=\"hidden\" name=\"".$k."\" value=\"".stripslashes($v)."\" />\n";
-					}
-				}
+					if ($k != 'force') {
+						$OUT .= "<input type=\"hidden\" name=\"" . secureString($k) . "\" value=\"" . SQL_ESCAPE($v) . "\" />\n";
+					} // END - if
+				} // END - foreach
+
+				// Remember data
 				$content['hidden'] = $OUT;
 				$content['email']  = $postData['email'];