diff --git a/client_trips.php b/client_trips.php index 51456060..d6010fa2 100644 --- a/client_trips.php +++ b/client_trips.php @@ -3,7 +3,7 @@ require_once("inc_all_client.php"); if (!empty($_GET['sb'])) { - $sb = strip_tags(mysqli_real_escape_string($mysqli, $_GET['sb'])); + $sb = sanitizeInput($_GET['sb']); } else { $sb = "trip_date"; } @@ -16,8 +16,8 @@ if (!isset($_GET['o'])) { //Date From and Date To Filter if (isset($_GET['dtf'])) { - $dtf = strip_tags(mysqli_real_escape_string($mysqli, $_GET['dtf'])); - $dtt = strip_tags(mysqli_real_escape_string($mysqli, $_GET['dtt'])); + $dtf = sanitizeInput($_GET['dtf']); + $dtt = sanitizeInput($_GET['dtt']); } else { $dtf = "0000-00-00"; $dtt = "9999-00-00"; @@ -42,9 +42,9 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
-

Trips

+

Trips

- +
@@ -54,7 +54,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
- +
@@ -63,8 +63,8 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); @@ -88,15 +88,15 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()")); "; @@ -124,12 +124,20 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
diff --git a/trip_add_modal.php b/trip_add_modal.php index 983977b1..b2edb92b 100644 --- a/trip_add_modal.php +++ b/trip_add_modal.php @@ -2,7 +2,7 @@