Store the sanitized form data when commenting online

When storing a comment, we should use the validated data instead of
the raw one.

diff --git a/blitiri.cgi b/blitiri.cgi
index 1ae70ff351bf7dee7432a33492480f5dae3ea763..e69789f900192b66018416aa2d395a6503d3c6f1 100755 (executable)
--- a/blitiri.cgi
+++ b/blitiri.cgi
@@ -1139,7 +1139,8 @@ def handle_cgi():
                                                % (line, desc)
                                valid = False
                if valid:
-                       c = article.add_comment(author, body, link)
+                       c = article.add_comment(form_data.author,
+                                       form_data.body, form_data.link)
                        c.save()
                        cdb = CommentDB(article)
                        cdb.comments = article.comments