Fixed XSS

pages/wot/9.php

@@ -61,18 +61,18 @@
 <? } ?>
   <tr>
     <td class="DataTD"><?=_("Subject")?>:</td>
-    <td class="DataTD" align="left"><input type="text" name="subject" value="<?=strip_tags($_POST['subject'])?>"></td>
+    <td class="DataTD" align="left"><input type="text" name="subject" value="<?=sanitizeHTML($_POST['subject'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Message")?>:</td>
-    <td class="DataTD"><textarea name="message" cols="40" rows="5" wrap="virtual"><?=strip_tags($_POST['message'])?></textarea></td>
+    <td class="DataTD"><textarea name="message" cols="40" rows="5" wrap="virtual"><?=sanitizeHTML($_POST['message'])?></textarea></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Send")?>"></td>
   </tr>
 </table>
 <input type="hidden" name="pageid" value="<?=$_SESSION['_config']['pagehash']?>">
-<input type="hidden" name="userid" value="<?=$_REQUEST['userid']?>">
+<input type="hidden" name="userid" value="<?=intval($_REQUEST['userid'])?>">
 <input type="hidden" name="oldid" value="<?=$id?>">
 </form>
 <p>[ <a href='javascript:history.go(-1)'>Go Back</a> ]</p>