Commit 15316d63 authored by Hugh Davenport's avatar Hugh Davenport
Browse files

Escape HTML for reset password email (bug #802347)



Change-Id: I8eed551a8585ee9dbbe5cd0e691bac81373f46a5
Signed-off-by: default avatarHugh Davenport <hugh@catalyst.net.nz>
parent 54c59cfd
......@@ -481,7 +481,7 @@ class Institution {
email_user($user, null,
get_string('noinstitutionsetpassemailsubject', 'mahara', $sitename, $this->displayname),
get_string('noinstitutionsetpassemailmessagetext', 'mahara', $fullname, $this->displayname, $sitename, $user->username, get_config('wwwroot'), $pwrequest->key, get_config('wwwroot'), $sitename, get_config('wwwroot'), $pwrequest->key),
get_string('noinstitutionsetpassemailmessagehtml', 'mahara', $fullname, $this->displayname, $sitename, $user->username, get_config('wwwroot'), $pwrequest->key, get_config('wwwroot'), $pwrequest->key, get_config('wwwroot'), $sitename, get_config('wwwroot'), $pwrequest->key, get_config('wwwroot'), $pwrequest->key));
get_string('noinstitutionsetpassemailmessagehtml', 'mahara', hsc($fullname), hsc($this->displayname), hsc($sitename), hsc($user->username), get_config('wwwroot'), hsc($pwrequest->key), get_config('wwwroot'), hsc($pwrequest->key), get_config('wwwroot'), hsc($sitename), get_config('wwwroot'), hsc($pwrequest->key), get_config('wwwroot'), hsc($pwrequest->key)));
insert_record('usr_password_request', $pwrequest);
}
catch (SQLException $e) {
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment