Stripslashes off data before adding them to current USER session record

diff --git a/user/edit.php b/user/edit.php
index 416b6032a74bcf2add493c9ca5f8223ecc0d63fc..227e72e6915f714b042118145ba4ea21e652145c 100644 (file)
--- a/user/edit.php
+++ b/user/edit.php
@@ -91,7 +91,7 @@
                     // Copy data into $USER session variable
                     $usernew = (array)$usernew;
                     foreach ($usernew as $variable => $value) {
-                        $USER->$variable = $value;
+                        $USER->$variable = stripslashes($value);
                     }
                     if (isset($USER->newadminuser)) {
                         unset($USER->newadminuser);