diff --git a/ground/controllers/JsonController.php b/ground/controllers/JsonController.php index 348446b..9b3cfa9 100644 --- a/ground/controllers/JsonController.php +++ b/ground/controllers/JsonController.php @@ -207,8 +207,8 @@ class JsonController extends Controller if ($paramName && $paramValue) { ExtraParams::model()->add(array( 'pointId' => $point->id, - 'name' => $paramName, - 'value' => $paramValue, + 'name' => strip_tags($paramName), + 'value' => strip_tags($paramValue), )); } }