From 464df08f44fddca976f584e5daaf538adc4f443d Mon Sep 17 00:00:00 2001 From: Leandro Lucarella Date: Wed, 13 Aug 2008 18:15:38 -0300 Subject: [PATCH 1/1] Store the sanitized form data when commenting online When storing a comment, we should use the validated data instead of the raw one. --- blitiri.cgi | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/blitiri.cgi b/blitiri.cgi index 1ae70ff..e69789f 100755 --- a/blitiri.cgi +++ b/blitiri.cgi @@ -1139,7 +1139,8 @@ def handle_cgi(): % (line, desc) valid = False if valid: - c = article.add_comment(author, body, link) + c = article.add_comment(form_data.author, + form_data.body, form_data.link) c.save() cdb = CommentDB(article) cdb.comments = article.comments -- 2.43.0