diff --git a/module/install/model.php b/module/install/model.php index c4ab6ccb7b..ecdc7c90bc 100644 --- a/module/install/model.php +++ b/module/install/model.php @@ -514,7 +514,7 @@ class installModel extends model /* Insert a company. */ $company = new stdclass(); - $company->name = $this->post->company; + $company->name = strip_tags($this->post->company); $company->admins = ",{$this->post->account},"; $this->dao->insert(TABLE_COMPANY)->data($company)->autoCheck()->exec(); if(!dao::isError())