Merge pull request #642 from wrongecho/stricter-input-validation-theme-tags

Add stronger input validation/output escaping
This commit is contained in:
wrongecho
2023-03-05 19:31:22 +00:00
committed by GitHub
8 changed files with 42 additions and 42 deletions

View File

@@ -870,7 +870,7 @@ if(isset($_POST['edit_theme_settings'])){
validateAdminRole();
$theme = sanitizeInput($_POST['theme']);
$theme = preg_replace("/[^0-9a-zA-Z-]/", "", sanitizeInput($_POST['theme']));
mysqli_query($mysqli,"UPDATE settings SET config_theme = '$theme' WHERE company_id = $session_company_id");