stripslashes on input
|Reported by:||mglb1||Owned by:||mglb1|
|Estimated Hours Work:||2|
Previously stripslashes was called from the enc method inside ccs_xmlrpc.php however this is not correct as not all data that passes through the enc function is sourced from a POST/GET call.
We need to audit the rest of the PHP code to ensure that stripslashes is called on data in the appropriate places *before* it is fed to the enc method.