AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-25 01:40:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

Browse Source
This commit is contained in:
johnnyq
2026-07-14 17:17:50 -04:00
parent 7bc47a58fe
commit b57ddc0e5c
148 changed files with 1945 additions and 1945 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
agent/post/recurring_expense.php
View File

@@ -20,8 +20,8 @@ if (isset($_POST['create_recurring_expense'])) {
$vendor = intval($_POST['vendor']);
$client_id = intval($_POST['client_id']);
$category = intval($_POST['category']);
$description = sanitizeInput($_POST['description']);
$reference = sanitizeInput($_POST['reference']);
$description = escapeSql($_POST['description']);
$reference = escapeSql($_POST['reference']);
$year = date('Y');
if (strtotime("$year-$month-$day") < time()) {
@@ -56,8 +56,8 @@ if (isset($_POST['edit_recurring_expense'])) {
$vendor = intval($_POST['vendor']);
$client_id = intval($_POST['client_id']);
$category = intval($_POST['category']);
$description = sanitizeInput($_POST['description']);
$reference = sanitizeInput($_POST['reference']);
$description = escapeSql($_POST['description']);
$reference = escapeSql($_POST['reference']);
$year = date('Y');
if (strtotime("$year-$month-$day") < time()) {
@@ -86,7 +86,7 @@ if (isset($_GET['delete_recurring_expense'])) {
// Get Recurring Expense Details for Logging
$sql = mysqli_query($mysqli,"SELECT recurring_expense_description, recurring_expense_client_id FROM recurring_expenses WHERE recurring_expense_id = $recurring_expense_id");
$row = mysqli_fetch_assoc($sql);
$recurring_expense_description = sanitizeInput($row['recurring_expense_description']);
$recurring_expense_description = escapeSql($row['recurring_expense_description']);
$client_id = intval($row['recurring_expense_client_id']);
mysqli_query($mysqli,"DELETE FROM recurring_expenses WHERE recurring_expense_id = $recurring_expense_id");