Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

This commit is contained in:
johnnyq
2026-07-14 17:17:50 -04:00
parent 7bc47a58fe
commit b57ddc0e5c
148 changed files with 1945 additions and 1945 deletions

View File

@@ -9,7 +9,7 @@ if (isset($_POST['api_key_decrypt_password'])) {
}
if (isset($_POST['credential_name'])) {
$name = sanitizeInput($_POST['credential_name']);
$name = escapeSql($_POST['credential_name']);
} elseif (isset($credential_row) && isset($credential_row['credential_name'])) {
$name = mysqli_real_escape_string($mysqli, $credential_row['credential_name']);
} else {
@@ -17,7 +17,7 @@ if (isset($_POST['credential_name'])) {
}
if (isset($_POST['credential_description'])) {
$description = sanitizeInput($_POST['credential_description']);
$description = escapeSql($_POST['credential_description']);
} elseif (isset($credential_row) && isset($credential_row['credential_description'])) {
$description = mysqli_real_escape_string($mysqli, $credential_row['credential_description']);
} else {
@@ -25,7 +25,7 @@ if (isset($_POST['credential_description'])) {
}
if (isset($_POST['credential_uri'])) {
$uri = sanitizeInput($_POST['credential_uri']);
$uri = escapeSql($_POST['credential_uri']);
} elseif (isset($credential_row) && isset($credential_row['credential_uri'])) {
$uri = mysqli_real_escape_string($mysqli, $credential_row['credential_uri']);
} else {
@@ -33,7 +33,7 @@ if (isset($_POST['credential_uri'])) {
}
if (isset($_POST['credential_uri_2'])) {
$uri_2 = sanitizeInput($_POST['credential_uri_2']);
$uri_2 = escapeSql($_POST['credential_uri_2']);
} elseif (isset($credential_row) && isset($credential_row['credential_uri_2'])) {
$uri_2 = mysqli_real_escape_string($mysqli, $credential_row['credential_uri_2']);
} else {
@@ -62,7 +62,7 @@ if (isset($_POST['credential_password'])) {
}
if (isset($_POST['credential_otp_secret'])) {
$otp_secret = sanitizeInput($_POST['credential_otp_secret']);
$otp_secret = escapeSql($_POST['credential_otp_secret']);
} elseif (isset($credential_row) && isset($credential_row['credential_otp_secret'])) {
$otp_secret = mysqli_real_escape_string($mysqli, $credential_row['credential_otp_secret']);
} else {
@@ -70,7 +70,7 @@ if (isset($_POST['credential_otp_secret'])) {
}
if (isset($_POST['credential_note'])) {
$note = sanitizeInput($_POST['credential_note']);
$note = escapeSql($_POST['credential_note']);
} elseif (isset($credential_row) && isset($credential_row['credential_note'])) {
$note = mysqli_real_escape_string($mysqli, $credential_row['credential_note']);
} else {