strip tags input value

slims · May 11, 2019 · f278444 · f278444
1 parent 784b1a9
commit f278444
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/contents/visitor.inc.php b/lib/contents/visitor.inc.php
@@ -130,8 +130,8 @@ function setCounter($str_member_ID) {
     } else {
     // non member
         $_d = $_q->fetch_assoc();
-        $member_name = $dbs->escape_string(trim($_POST['memberID']));
-        $_institution = $dbs->escape_string(trim($_POST['institution']));
+        $member_name = $dbs->escape_string(trim(strip_tags($_POST['memberID'])));
+        $_institution = $dbs->escape_string(trim(strip_tags($_POST['institution'])));
         $photo = 'non_member.png';
         $_checkin_date = date('Y-m-d H:i:s');
         if (!$_institution) {