Clean all data in user profile

diff --git a/user/edit.php b/user/edit.php
index dca45a4474aef3b6c15e5272716a090cde6980ee..f0283c33a0fb8a0603feb01c7f6655534f49faa5 100644 (file)
--- a/user/edit.php
+++ b/user/edit.php
@@ -46,8 +46,14 @@
 /// If data submitted, then process and store.
 
     if ($usernew = data_submitted()) {
+
+        foreach ($usernew as $key => $data) {
+            $usernew->$key = clean_text($usernew->$key, FORMAT_MOODLE);
+        }
+
         $usernew->firstname = strip_tags($usernew->firstname);
         $usernew->lastname  = strip_tags($usernew->lastname);
+
         if (isset($usernew->username)) {
             $usernew->username = trim(moodle_strtolower($usernew->username));
         }