diff options
Diffstat (limited to 'classes')
| -rw-r--r-- | classes/rpc.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/classes/rpc.php b/classes/rpc.php index d5e7b937a..a5e32d47e 100644 --- a/classes/rpc.php +++ b/classes/rpc.php @@ -210,9 +210,9 @@ class RPC extends Protected_Handler { } function setpref() { - $value = str_replace("\n", "<br/>", $_REQUEST['value']); - // set_pref escapes input, so no need to double escape it here + $key = $_REQUEST['key']; + $value = str_replace("\n", "<br/>", $_REQUEST['value']); set_pref($this->link, $key, $value, $_SESSION['uid'], $key != 'USER_STYLESHEET'); |