From 8aad9f081b9fd83f8cd8358547234fbdcdaf9611 Mon Sep 17 00:00:00 2001 From: Brett Profitt Date: Wed, 18 Apr 2012 20:22:54 -0700 Subject: Fixes #1301. Not filtering passwords. --- engine/lib/user_settings.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'engine/lib/user_settings.php') diff --git a/engine/lib/user_settings.php b/engine/lib/user_settings.php index af30d8f0d..e4069fb53 100644 --- a/engine/lib/user_settings.php +++ b/engine/lib/user_settings.php @@ -33,9 +33,9 @@ function users_settings_save() { * @access private */ function elgg_set_user_password() { - $current_password = get_input('current_password'); - $password = get_input('password'); - $password2 = get_input('password2'); + $current_password = get_input('current_password', null, false); + $password = get_input('password', null, false); + $password2 = get_input('password2', null, false); $user_guid = get_input('guid'); if (!$user_guid) { -- cgit v1.2.3