Changeset 3643 for trunk/bp-xprofile.php

Timestamp:

01/01/2011 09:36:22 PM (15 years ago)

Author:

djpaul

Message:

Escape xprofile base group name and fullname field name options on the settings screen. Fixes #2986

File:

• trunk/bp-xprofile.php (modified) (1 diff)

trunk/bp-xprofile.php

@@ -26 +26 @@
 
     /* Assign the base group and fullname field names to constants to use in SQL statements */
-    define ( 'BP_XPROFILE_BASE_GROUP_NAME', $bp->site_options['bp-xprofile-base-group-name'] );
-    define ( 'BP_XPROFILE_FULLNAME_FIELD_NAME', $bp->site_options['bp-xprofile-fullname-field-name'] );
+    define ( 'BP_XPROFILE_BASE_GROUP_NAME', stripslashes( $bp->site_options['bp-xprofile-base-group-name'] ) );
+    define ( 'BP_XPROFILE_FULLNAME_FIELD_NAME', stripslashes( $bp->site_options['bp-xprofile-fullname-field-name'] ) );
 
     /* For internal identification */