AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-23 08:50:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

Browse Source
This commit is contained in:
johnnyq
2026-07-14 17:17:50 -04:00
parent 7bc47a58fe
commit b57ddc0e5c
148 changed files with 1945 additions and 1945 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
api/v1/locations/location_model.php
View File

@@ -3,7 +3,7 @@
// Variable assignment from POST (or: blank/from DB is updating)
if (isset($_POST['location_name'])) {
$name = sanitizeInput($_POST['location_name']);
$name = escapeSql($_POST['location_name']);
} elseif ($location_row) {
$name = mysqli_real_escape_string($mysqli, $location_row['location_name']);
} else {
@@ -11,7 +11,7 @@ if (isset($_POST['location_name'])) {
}
if (isset($_POST['location_description'])) {
$description = sanitizeInput($_POST['location_description']);
$description = escapeSql($_POST['location_description']);
} elseif ($location_row) {
$description = mysqli_real_escape_string($mysqli, $location_row['location_description']);
} else {
@@ -19,7 +19,7 @@ if (isset($_POST['location_description'])) {
}
if (isset($_POST['location_country'])) {
$country = sanitizeInput($_POST['location_country']);
$country = escapeSql($_POST['location_country']);
} elseif ($location_row) {
$country = mysqli_real_escape_string($mysqli, $location_row['location_country']);
} else {
@@ -27,7 +27,7 @@ if (isset($_POST['location_country'])) {
}
if (isset($_POST['location_address'])) {
$address = sanitizeInput($_POST['location_address']);
$address = escapeSql($_POST['location_address']);
} elseif ($location_row) {
$address = mysqli_real_escape_string($mysqli, $location_row['location_address']);
} else {
@@ -35,7 +35,7 @@ if (isset($_POST['location_address'])) {
}
if (isset($_POST['location_city'])) {
$city = sanitizeInput($_POST['location_city']);
$city = escapeSql($_POST['location_city']);
} elseif ($location_row) {
$city = mysqli_real_escape_string($mysqli, $location_row['location_city']);
} else {
@@ -43,7 +43,7 @@ if (isset($_POST['location_city'])) {
}
if (isset($_POST['location_state'])) {
$state = sanitizeInput($_POST['location_state']);
$state = escapeSql($_POST['location_state']);
} elseif ($location_row) {
$state = mysqli_real_escape_string($mysqli, $location_row['location_state']);
} else {
@@ -51,7 +51,7 @@ if (isset($_POST['location_state'])) {
}
if (isset($_POST['location_zip'])) {
$zip = sanitizeInput($_POST['location_zip']);
$zip = escapeSql($_POST['location_zip']);
} elseif ($location_row) {
$zip = mysqli_real_escape_string($mysqli, $location_row['location_zip']);
} else {
@@ -59,7 +59,7 @@ if (isset($_POST['location_zip'])) {
}
if (isset($_POST['location_hours'])) {
$hours = sanitizeInput($_POST['location_hours']);
$hours = escapeSql($_POST['location_hours']);
} elseif ($location_row) {
$hours = mysqli_real_escape_string($mysqli, $location_row['location_hours']);
} else {
@@ -67,7 +67,7 @@ if (isset($_POST['location_hours'])) {
}
if (isset($_POST['location_notes'])) {
$notes = sanitizeInput($_POST['location_notes']);
$notes = escapeSql($_POST['location_notes']);
} elseif ($location_row) {
$notes = mysqli_real_escape_string($mysqli, $location_row['location_notes']);
} else {