MDL-66762 user: escape extra/email user fields.

This commit is contained in:
Paul Holden 2019-10-07 17:33:48 +01:00 committed by Adrian Greeve
parent eb9f830604
commit 7455b741c9
11 changed files with 14 additions and 17 deletions

View file

@ -1220,7 +1220,7 @@ class course_enrolment_manager {
);
foreach ($extrafields as $field) {
$details[$field] = $user->{$field};
$details[$field] = s($user->{$field});
}
// Last time user has accessed the site.