diff options
| author | Gerhard Killesreiter <killes_www_drop_org@227.no-reply.drupal.org> | 2006-08-02 18:13:40 +0000 |
|---|---|---|
| committer | Gerhard Killesreiter <killes_www_drop_org@227.no-reply.drupal.org> | 2006-08-02 18:13:40 +0000 |
| commit | 8b820834e5c7ee12668c8f3a172dabc3af0455ba (patch) | |
| tree | 2d13c2e834e9848c71ad3fd90cd38fc7474bd613 /modules/user/user.module | |
| parent | eaf354017509ce7f43da89f1ec53986cdca57f2a (diff) | |
| download | brdo-8b820834e5c7ee12668c8f3a172dabc3af0455ba.tar.gz brdo-8b820834e5c7ee12668c8f3a172dabc3af0455ba.tar.bz2 | |
SA-2006-011
Diffstat (limited to 'modules/user/user.module')
| -rw-r--r-- | modules/user/user.module | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/user/user.module b/modules/user/user.module index 46c2ea9d9..a4d120e72 100644 --- a/modules/user/user.module +++ b/modules/user/user.module @@ -854,7 +854,7 @@ function user_login($msg = '') { // Display login form: if ($msg) { - $form['message'] = array('#value' => "<p>$msg</p>"); + $form['message'] = array('#value' => '<p>'. check_plain($msg) .'</p>'); } $form['name'] = array('#type' => 'textfield', '#title' => t('Username'), |