Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

This commit is contained in:
johnnyq
2026-07-14 17:10:45 -04:00
parent d62b6e2ae7
commit 7bc47a58fe
338 changed files with 3057 additions and 3057 deletions

View File

@@ -70,7 +70,7 @@ ob_start();
while ($row = mysqli_fetch_assoc($sql_all_folders)) {
$folders[$row['folder_id']] = [
'folder_id' => (int)$row['folder_id'],
'folder_name' => nullable_htmlentities($row['folder_name']),
'folder_name' => escapeHtml($row['folder_name']),
'parent_folder'=> (int)$row['parent_folder'],
'children' => []
];

View File

@@ -28,7 +28,7 @@
);
while ($row = mysqli_fetch_assoc($sql_assets_select)) {
$asset_id = intval($row['asset_id']);
$asset_name = nullable_htmlentities($row['asset_name']);
$asset_name = escapeHtml($row['asset_name']);
?>
<option value="<?php echo $asset_id ?>"><?php echo $asset_name; ?></option>
@@ -50,7 +50,7 @@
while ($row = mysqli_fetch_assoc($sql_assets)) {
$asset_id = intval($row['asset_id']);
$asset_name = nullable_htmlentities($row['asset_name']);
$asset_name = escapeHtml($row['asset_name']);
$linked_assets[] = $asset_id;

View File

@@ -8,9 +8,9 @@ $sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = $file_id LIMIT
$row = mysqli_fetch_assoc($sql);
$client_id = intval($row['file_client_id']);
$file_folder_id = nullable_htmlentities($row['file_folder_id']);
$file_name = nullable_htmlentities($row['file_name']);
$file_ext = nullable_htmlentities($row['file_ext']);
$file_folder_id = escapeHtml($row['file_folder_id']);
$file_name = escapeHtml($row['file_name']);
$file_ext = escapeHtml($row['file_ext']);
if ($file_ext == 'pdf') {
$file_icon = "file-pdf";
} elseif ($file_ext == 'gz' || $file_ext == 'tar' || $file_ext == 'zip' || $file_ext == '7z' || $file_ext == 'rar') {
@@ -69,7 +69,7 @@ ob_start();
while ($row = mysqli_fetch_assoc($sql_all_folders)) {
$folders[$row['folder_id']] = array(
'folder_id' => intval($row['folder_id']),
'folder_name' => nullable_htmlentities($row['folder_name']),
'folder_name' => escapeHtml($row['folder_name']),
'parent_folder' => intval($row['parent_folder']),
'children' => array()
);

View File

@@ -7,9 +7,9 @@ $sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = $file_id LIMIT
$row = mysqli_fetch_assoc($sql);
$client_id = intval($row['file_client_id']);
$file_name = nullable_htmlentities($row['file_name']);
$file_description = nullable_htmlentities($row['file_description']);
$file_ext = nullable_htmlentities($row['file_description']);
$file_name = escapeHtml($row['file_name']);
$file_description = escapeHtml($row['file_description']);
$file_ext = escapeHtml($row['file_description']);
if ($file_ext == 'pdf') {
$file_icon = "file-pdf";