@@ -2,17 +2,17 @@
 	include_once "../../shared/php/global.php";
 	include_once "../../shared/php/db_connect.php";
 	include_once "./employee_check_login.php";
 	include_once "../../shared/php/utils.php";
 	if(checkLogin() && isset($_POST['type_name']) && isset($_POST['descr']) && isset($_POST['price']) && isset($_POST['duration']) && isset($_POST['spaces']) && isset($_POST['questions']) && isset($_POST['location'])){
-		$type_name = $_POST['type_name'];
-		$descr = $_POST['descr'];
-		$price = $_POST['price'];
-		$duration = $_POST['duration'];
-		$spaces = $_POST['spaces'];
-		$questions = $_POST['questions'];
-		$location =$_POST['location'];
+		$type_name = strip_tags($_POST['type_name']);
+		$descr = strip_tags($_POST['descr']);
+		$price = strip_tags($_POST['price']);
+		$duration = strip_tags($_POST['duration']);
+		$spaces = strip_tags($_POST['spaces']);
+		$questions = strip_tags($_POST['questions']);
+		$location = strip_tags($_POST['location']);
 		$spaces = intval($spaces);
 		/**** ERROR CHECKING FOR THESE THINGS *******/
 		if(gettype($descr) != "string" || !isset($descr)){
 			$descr = "";
 		}