X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fsponsor_functions.php;h=7606738e22c41b0ecc2f6e7eac8abc4ace5d0473;hb=b1cf96c4a5a63a1d334119a0681e5fbf68edf527;hp=d0eb5c850fda45ae917b798c0bb0450b96e7b872;hpb=c2e17d983fcbc0c3bd1dd37908d87c678f0367df;p=mailer.git

diff --git a/inc/libs/sponsor_functions.php b/inc/libs/sponsor_functions.php
index d0eb5c850f..7606738e22 100644
--- a/inc/libs/sponsor_functions.php
+++ b/inc/libs/sponsor_functions.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 04/23/2005 *
- * ===============                              Last change: 05/18/2008 *
+ * Mailer v0.2.1-FINAL                                Start: 04/23/2005 *
+ * ===================                          Last change: 05/18/2008 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : sponsor_functions.php                            *
@@ -122,7 +122,7 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
 		// Save sponsor?
 		if ($SAVE === true) {
 			// Default is no force even when a guest want to abuse this force switch
-			if ((empty($postData['force'])) || (!isAdmin())) $postData['force'] = 0;
+			if ((empty($postData['force'])) || (!isAdmin())) $postData['force'] = '0';
 
 			// SQL and message string is empty by default
 			$sql = ''; $message = '';
@@ -175,10 +175,12 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
 				$OUT = '';
 				foreach ($postData as $k => $v) {
 					// Do not add 'force' !
-					if ($k != "force") {
-						$OUT .= "<input type=\"hidden\" name=\"".$k."\" value=\"".stripslashes($v)."\" />\n";
-					}
-				}
+					if ($k != 'force') {
+						$OUT .= "<input type=\"hidden\" name=\"" . secureString($k) . "\" value=\"" . SQL_ESCAPE($v) . "\" />\n";
+					} // END - if
+				} // END - foreach
+
+				// Remember data
 				$content['hidden'] = $OUT;
 				$content['email']  = $postData['email'];