forgot mot de passe, login

forgotpassword.php

@@ -9,7 +9,7 @@ $message = null;
 
 
 if (isset($_POST['email']) && !empty($_POST['email'])) {
-    $provided_email = $_POST['email'];
+    $provided_email = htmlspecialchars($_POST['email']);
 }
 if (isset($_POST['email']) && empty($_POST['email'])) {
     $errors = 'email should\'nt be empty';
@@ -18,7 +18,7 @@ if (isset($_POST['email']) && empty($_POST['email'])) {
 
 
 if (isset($_POST['password']) && !empty($_POST['password'])) {
-    $provided_password = $_POST['password'];
+    $provided_password = htmlspecialchars($_POST['password']);
 }
 if (isset($_POST['password']) && empty($_POST['password'])) {
     $errors = 'password is required';

login.php

@@ -10,11 +10,11 @@ if ($obj->loggedin($obj)) {
 }
 
 if (isset($_POST['email'])) {
-    $provided_email = $_POST['email'];
+    $provided_email = htmlspecialchars($_POST['email']);
 }
 
 if (isset($_POST['password'])) {
-    $provided_password = $_POST['password'];
+    $provided_password = htmlspecialchars($_POST['password']);
 }