X-Git-Url: https://git.wh0rd.org/?a=blobdiff_plain;f=register.php;h=0d714c225b7accaeb968e02a99fbd76a7ec7b4c8;hb=707ad6ddf7b199e202fc39f61ffd08a4bc5bacc1;hp=69a3dbf5031e0330a05e362691e73173a77bc4d1;hpb=8d051fa0769922df69ac737eee9d13dff67095a9;p=tt-rss.git

diff --git a/register.php b/register.php
index 69a3dbf5..0d714c22 100644
--- a/register.php
+++ b/register.php
@@ -74,7 +74,7 @@
 	if ($action == "check") {
 		header("Content-Type: application/xml");
 
-		$login = trim(db_escape_string($_REQUEST['login']));
+		$login = trim(db_escape_string($link, $_REQUEST['login']));
 
 		$result = db_query($link, "SELECT id FROM ttrss_users WHERE
 			LOWER(login) = LOWER('$login')");
@@ -242,9 +242,9 @@
 	<?php } else if ($action == "do_register") { ?>
 
 	<?php
-		$login = mb_strtolower(trim(db_escape_string($_REQUEST["login"])));
-		$email = trim(db_escape_string($_REQUEST["email"]));
-		$test = trim(db_escape_string($_REQUEST["turing_test"]));
+		$login = mb_strtolower(trim(db_escape_string($link, $_REQUEST["login"])));
+		$email = trim(db_escape_string($link, $_REQUEST["email"]));
+		$test = trim(db_escape_string($link, $_REQUEST["turing_test"]));
 
 		if (!$login || !$email || !$test) {
 			print_error(__("Your registration information is incomplete."));