AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-09 17:17:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

Browse Source
This commit is contained in:
johnnyq
2026-07-14 17:17:50 -04:00
parent 7bc47a58fe
commit b57ddc0e5c
148 changed files with 1945 additions and 1945 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
api/v1/contacts/contact_model.php
View File

@@ -3,7 +3,7 @@ define('number_regex', '/[^0-9]/');
// Variable assignment from POST (or: blank/from DB is updating)
if (isset($_POST['contact_name'])) {
$name = sanitizeInput($_POST['contact_name']);
$name = escapeSql($_POST['contact_name']);
} elseif ($contact_row) {
$name = mysqli_real_escape_string($mysqli, $contact_row['contact_name']);
} else {
@@ -11,7 +11,7 @@ if (isset($_POST['contact_name'])) {
}
if (isset($_POST['contact_title'])) {
$title = sanitizeInput($_POST['contact_title']);
$title = escapeSql($_POST['contact_title']);
} elseif ($contact_row) {
$title = mysqli_real_escape_string($mysqli, $contact_row['contact_title']);
} else {
@@ -19,7 +19,7 @@ if (isset($_POST['contact_title'])) {
}
if (isset($_POST['contact_department'])) {
$department = sanitizeInput($_POST['contact_department']);
$department = escapeSql($_POST['contact_department']);
} elseif ($contact_row) {
$department = mysqli_real_escape_string($mysqli, $contact_row['contact_department']);
} else {
@@ -27,7 +27,7 @@ if (isset($_POST['contact_department'])) {
}
if (isset($_POST['contact_email'])) {
$email = sanitizeInput($_POST['contact_email']);
$email = escapeSql($_POST['contact_email']);
} elseif ($contact_row) {
$email = mysqli_real_escape_string($mysqli, $contact_row['contact_email']);
} else {
@@ -59,7 +59,7 @@ if (isset($_POST['contact_mobile'])) {
}
if (isset($_POST['contact_notes'])) {
$notes = sanitizeInput($_POST['contact_notes']);
$notes = escapeSql($_POST['contact_notes']);
} elseif ($contact_row) {
$notes = mysqli_real_escape_string($mysqli, $contact_row['contact_notes']);
} else {