From 554b31a26576d3d1d0da8c91cc000202962403e2 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 26 Sep 2011 18:28:59 -0300
Subject: Logic goes to muamba_get_transactions()

---
 muamba.business.inc | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'muamba.business.inc')

diff --git a/muamba.business.inc b/muamba.business.inc
index a9da728..d48efcb 100644
--- a/muamba.business.inc
+++ b/muamba.business.inc
@@ -110,7 +110,15 @@ function muamba_get_transactions($uid, $type = 'sent', $status = MUAMBA_REQUESTE
       ->fields('m', array('mid', 'uid', 'owner', 'thread_id'));
   }
 
-  return $query->execute()->fetchAll();
+  $rows    = array();
+  $results = $query->execute()->fetchAll();
+
+  // Sanitize the data before handing it off to the theme layer.
+  foreach ($results as $entry) {
+    $rows[] = array_map('check_plain', (array) $entry);
+  }
+
+  return $rows;
 }
 
 /**
-- 
cgit v1.2.3