From c081bca2ca993da7cd8efdb8f42cbb5789f62ffa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Munsch?= <jeremy.munsch@ldc.fr>
Date: Tue, 18 Jun 2024 10:22:59 +0200
Subject: [PATCH] Prevent  xss attacks on ldc-message, clear inputs

---
 content/plugins/ldc-messages/ldc-messages.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/content/plugins/ldc-messages/ldc-messages.php b/content/plugins/ldc-messages/ldc-messages.php
index 74e22af2..0cebd571 100644
--- a/content/plugins/ldc-messages/ldc-messages.php
+++ b/content/plugins/ldc-messages/ldc-messages.php
@@ -232,6 +232,11 @@ function ContactAjx()
                 $content .= ucfirst($key) . " : " . $item . "\n\r";
             }
         }
+        // ! Freaking sanitize inputs
+        $firstname = strip_tags($firstname);
+        $lastname = strip_tags($lastname);
+        $email = strip_tags($email);
+        $content = strip_tags($content);
 
         $ref = date('ymd') . '-' . generateRandomString(4);