From a66b6052df9b3ed76cc6ddb63c861cf6d1b1b7a8 Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Mon, 2 Jan 2023 19:28:24 +0000
Subject: [PATCH] Change stripslashes to strip_tags for better html
 sanitization

---
 clients.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clients.php b/clients.php
index 99f2403c..3d8c42b9 100644
--- a/clients.php
+++ b/clients.php
@@ -119,7 +119,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
       <div class="row">
         <div class="col-sm-4">
           <div class="input-group">
-            <input type="search" class="form-control" name="query" value="<?php if(isset($query)){echo stripslashes(htmlentities($query));} ?>" placeholder="Search Clients" autofocus>
+            <input type="search" class="form-control" name="query" value="<?php if(isset($query)){echo strip_tags(htmlentities($query));} ?>" placeholder="Search Clients" autofocus>
             <div class="input-group-append">
               <button class="btn btn-secondary" type="button" data-toggle="collapse" data-target="#advancedFilter"><i class="fas fa-filter"></i></button>
               <button class="btn btn-primary"><i class="fa fa-search"></i></button>