mirror of
https://github.com/itflow-org/itflow
synced 2026-02-28 02:44:53 +00:00
Merge pull request #642 from wrongecho/stricter-input-validation-theme-tags
Add stronger input validation/output escaping
This commit is contained in:
2
post.php
2
post.php
@@ -870,7 +870,7 @@ if(isset($_POST['edit_theme_settings'])){
|
||||
|
||||
validateAdminRole();
|
||||
|
||||
$theme = sanitizeInput($_POST['theme']);
|
||||
$theme = preg_replace("/[^0-9a-zA-Z-]/", "", sanitizeInput($_POST['theme']));
|
||||
|
||||
mysqli_query($mysqli,"UPDATE settings SET config_theme = '$theme' WHERE company_id = $session_company_id");
|
||||
|
||||
|
||||
Reference in New Issue
Block a user