Improved register_globals handling

www/index.php

@@ -550,14 +550,14 @@
 
 	if($oldid == 11 && $process != "")
 	{
-		$who = stripslashes($who);
+		$who = stripslashes($_REQUEST['who']);
 		$email = stripslashes($_REQUEST['email']);
-		$subject = stripslashes($subject);
+		$subject = stripslashes($_REQUEST['subject']);
-		$message = stripslashes($message);
+		$message = stripslashes($_REQUEST['message']);
 		$secrethash = $_REQUEST['secrethash2'];
 
 		if($_SESSION['_config']['secrethash'] != $secrethash || $secrethash == "" || $_SESSION['_config']['secrethash'] == "" ||
-			strstr($subject, "botmetka") || strstr($subject, "servermetka"))
+			strstr($subject, "botmetka") || strstr($subject, "servermetka") || strstr($who,"\n") || strstr($email,"\n") || strstr($subject,"\n") )
 		{
 			$id = $oldid;
 			$process = "";