include_once("$CFG->libdir/class.smtp.php");
include_once("$CFG->libdir/class.phpmailer.php");
- $subject = stripslashes($subject);
- $message = stripslashes($message);
+ $subject = strip_tags(stripslashes($subject));
+ $message = strip_tags(stripslashes($message));
$mail = new phpmailer;
return false;
}
- $subject = stripslashes($subject);
- $message = stripslashes($message);
+ $subject = strip_tags(stripslashes($subject));
+ $message = strip_tags(stripslashes($message));
$mail = new phpmailer;