diff --git a/index.php b/index.php index 9d5f25ea..27335a36 100644 --- a/index.php +++ b/index.php @@ -436,7 +436,7 @@ function ban_canLogin($conf) else { ban_loginFailed($conf); - $redir = '&username='. $_POST['login']; + $redir = '&username='. urlencode($_POST['login']); if (isset($_GET['post'])) { $redir .= '&post=' . urlencode($_GET['post']); foreach (array('description', 'source', 'title', 'tags') as $param) {