diff --git a/pandora_console/include/auth/mysql.php b/pandora_console/include/auth/mysql.php index ed7b095f55..8c1e27f0f9 100644 --- a/pandora_console/include/auth/mysql.php +++ b/pandora_console/include/auth/mysql.php @@ -402,8 +402,8 @@ function process_user_login_remote($login, $pass, $api=false) $config['auth_error'] = __('User not found in database or incorrect password'); return false; } else { - $user_info['fullname'] = db_escape_string_sql($sr['cn'][0]); - $user_info['email'] = $sr['mail'][0]; + $user_info['fullname'] = db_escape_string_sql(io_safe_input($sr['cn'][0])); + $user_info['email'] = io_safe_input($sr['mail'][0]); // Create the user. $create_user = create_user_and_permisions_ldap(