Properly remove bad characters from subject

diff --git a/wcfsetup/install/files/lib/form/MessageForm.class.php b/wcfsetup/install/files/lib/form/MessageForm.class.php
index 9da2da41d1b4bffad098b1a6998bd78ac8039c93..2c84625a359b2a74d7d2a4bc40aee440205bb5da 100644 (file)
--- a/wcfsetup/install/files/lib/form/MessageForm.class.php
+++ b/wcfsetup/install/files/lib/form/MessageForm.class.php
@@ -197,7 +197,7 @@ abstract class MessageForm extends AbstractCaptchaForm {
        public function readFormParameters() {
                parent::readFormParameters();
                
-               if (isset($_POST['subject'])) $this->subject = StringUtil::trim($_POST['subject']);
+               if (isset($_POST['subject'])) $this->subject = StringUtil::trim(MessageUtil::stripCrap($_POST['subject']));
                if (isset($_POST['text'])) $this->text = StringUtil::trim(MessageUtil::stripCrap($_POST['text']));
                
                // settings