18c18 < $call = $INPUT->post->str('call'); --- > $call = $INPUT->post->filter('utf8_stripspecials')->str('call'); 20c20 < $call = $INPUT->get->str('call'); --- > $call = $INPUT->get->filter('utf8_stripspecials')->str('call');