AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-23 08:50:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

Browse Source
This commit is contained in:
johnnyq
2026-07-14 17:10:45 -04:00
parent d62b6e2ae7
commit 7bc47a58fe
338 changed files with 3057 additions and 3057 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
includes/footer.php
View File

@@ -11,7 +11,7 @@ if (basename(dirname($_SERVER['REQUEST_URI'])) === 'admin') { ?>
if (basename(dirname($_SERVER['REQUEST_URI'])) === 'guest') { ?>
<p class="text-center">
<?php
echo nullable_htmlentities($session_company_name);
echo escapeHtml($session_company_name);
if (!$config_whitelabel_enabled) {
echo '<br><small class="text-muted">Powered by ITFlow</small>';
}

2
includes/header.php
View File

@@ -43,7 +43,7 @@ header("X-Frame-Options: DENY");
</head>
<body class="
hold-transition sidebar-mini layout-fixed layout-navbar-fixed
accent-<?php echo nullable_htmlentities($config_theme); ?>
accent-<?php echo escapeHtml($config_theme); ?>
<?php if ($user_config_theme_dark) echo 'dark-mode'; ?>
">
<div class="wrapper text-sm">

2
includes/page_title.php
View File

@@ -16,6 +16,6 @@ $page_title = ucwords($page_title);
$page_title_sanitized = sanitizeInput($page_title);
// Sanitize the page title to prevent XSS for output
$page_title = nullable_htmlentities($page_title);
$page_title = escapeHtml($page_title);
$tab_title = $session_company_name;

14
includes/top_nav.php
View File

@@ -1,5 +1,5 @@
<!-- Navbar -->
<nav class="main-header navbar navbar-expand navbar-<?php echo nullable_htmlentities($config_theme); ?> navbar-dark">
<nav class="main-header navbar navbar-expand navbar-<?php echo escapeHtml($config_theme); ?> navbar-dark">
<!-- Left navbar links -->
<ul class="navbar-nav">
@@ -15,7 +15,7 @@
<form class="form-inline" action="/agent/global_search.php">
<div class="input-group input-group-sm">
<input class="form-control form-control-navbar" type="search" placeholder="Search everywhere" name="query"
value="<?php if (isset($_GET['query'])) { echo nullable_htmlentities($_GET['query']); } ?>">
value="<?php if (isset($_GET['query'])) { echo escapeHtml($_GET['query']); } ?>">
<div class="input-group-append">
<button class="btn btn-navbar" type="submit">
<i class="fas fa-search"></i>
@@ -35,9 +35,9 @@
);
while ($row = mysqli_fetch_assoc($sql_custom_links)) {
$custom_link_name = nullable_htmlentities($row['custom_link_name']);
$custom_link_name = escapeHtml($row['custom_link_name']);
$custom_link_uri = sanitize_url($row['custom_link_uri']);
$custom_link_icon = nullable_htmlentities($row['custom_link_icon']);
$custom_link_icon = escapeHtml($row['custom_link_icon']);
$custom_link_new_tab = intval($row['custom_link_new_tab']);
if ($custom_link_new_tab == 1) {
$target = "target='_blank' rel='noopener noreferrer'";
@@ -83,7 +83,7 @@
class="user-image img-circle">
<?php } ?>
<span
class="d-none d-md-inline dropdown-toggle"><?php echo stripslashes(nullable_htmlentities($session_name)); ?></span>
class="d-none d-md-inline dropdown-toggle"><?php echo stripslashes(escapeHtml($session_name)); ?></span>
</a>
<ul class="dropdown-menu dropdown-menu-lg dropdown-menu-right">
<!-- User image -->
@@ -95,8 +95,8 @@
<img src="<?php echo "/uploads/users/$session_user_id/$session_avatar"; ?>" class="img-circle">
<?php } ?>
<p>
<?php echo stripslashes(nullable_htmlentities($session_name)); ?>
<small><?php echo nullable_htmlentities($session_user_role_display); ?></small>
<?php echo stripslashes(escapeHtml($session_name)); ?>
<small><?php echo escapeHtml($session_user_role_display); ?></small>
</p>
</li>
<!-- Menu Footer-->