MDL-12860 - do input sanitization early, so as to not mess up display later (merge...

diff --git a/mod/lesson/action/continue.php b/mod/lesson/action/continue.php
index e0c13f34be45bcb8998f2cc4315980714c3e568c..c4cb12144ea8133c4280fb9facc9990a2c378e25 100644 (file)
--- a/mod/lesson/action/continue.php
+++ b/mod/lesson/action/continue.php
@@ -91,7 +91,7 @@
                 $noanswer = true;
                 break;
             }            
-            $useranswer = stripslashes(clean_param($useranswer, PARAM_RAW));
+            $useranswer = s(stripslashes(clean_param($useranswer, PARAM_RAW)));
             $userresponse = addslashes($useranswer);
             if (!$answers = get_records("lesson_answers", "pageid", $pageid, "id")) {
                 print_error("Continue: No answers found");