missed escape on email receive

diff --git a/mod/dfrn_notify.php b/mod/dfrn_notify.php
index 057dfcb42297d19a4eff26ffb9d051c1b225ff6c..03d96d27ea2fffab33ab6223bf11018de1434436 100644 (file)
--- a/mod/dfrn_notify.php
+++ b/mod/dfrn_notify.php
@@ -68,6 +68,7 @@ function dfrn_notify_post(&$a) {
                $msg['parent-uri'] = notags(unxmlify($base['in-reply-to'][0]['data']));
                $msg['created'] = datetime_convert(notags(unxmlify('UTC','UTC',$base['sentdate'][0]['data'])));
 
+               dbesc_array($msg);
 
                $r = q("INSERT INTO `mail` (`" . implode("`, `", array_keys($msg)) 
                        . "`) VALUES ('" . implode("', '", array_values($msg)) . "')" );