AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-23 08:50:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

Browse Source
This commit is contained in:
johnnyq
2026-07-14 17:17:50 -04:00
parent 7bc47a58fe
commit b57ddc0e5c
148 changed files with 1945 additions and 1945 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
functions/app.php
View File

@@ -160,7 +160,7 @@ function getFieldById($table, $id, $field, $escape_method = 'sql') {
if (stripos($columns[$field]['type'], 'int') !== false) {
return (int)$value;
} else {
return sanitizeInput($value); // Escape for SQL using a custom function
return escapeSql($value); // Escape for SQL using a custom function
}
}
}
@@ -271,7 +271,7 @@ function addToMailQueue($data) {
// Check if 'email_queued_at' is set and not empty
if (isset($email['queued_at']) && !empty($email['queued_at'])) {
$queued_at = "'" . sanitizeInput($email['queued_at']) . "'";
$queued_at = "'" . escapeSql($email['queued_at']) . "'";
} else {
// Use the current date and time if 'email_queued_at' is not set or empty
$queued_at = 'CURRENT_TIMESTAMP()';

2
functions/auth.php
View File

@@ -11,7 +11,7 @@ function lookupUserPermission($module) {
return 3;
}
$module = sanitizeInput($module);
$module = escapeSql($module);
$sql = mysqli_query(
$mysqli,

2
functions/sanitize.php
View File

@@ -9,7 +9,7 @@ function escapeHtml($unsanitizedInput) {
return htmlspecialchars($unsanitizedInput ?? '', ENT_QUOTES, 'UTF-8');
}
function sanitizeInput($input) {
function escapeSql($input) {
global $mysqli;
if (!empty($input)) {