Strip tags from new user's names and email. Thanks to Paul Shew.

diff --git a/login/signup.php b/login/signup.php
index 7058404284ebb74c48507d37a1e83208b7271886..ef655dda37bfd451a12717970bf230e507c6405f 100644 (file)
--- a/login/signup.php
+++ b/login/signup.php
@@ -5,6 +5,10 @@
 
     if ($user = data_submitted()) {
 
+        $user->firstname = strip_tags($user->firstname);
+        $user->lastname = strip_tags($user->lastname);
+        $user->email = strip_tags($user->email);
+
         validate_form($user, $err);
         $user->username= trim(moodle_strtolower($user->username));