fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-10 20:44:28 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix missing encoding of HTML elements in group title and description

Browse source
This commit is contained in:
Kijin Sung 2023-08-05 16:08:39 +09:00
parent 180be3df95
commit e37ca7c702
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/member/member.admin.controller.php
View file

@ -1358,6 +1358,8 @@ class MemberAdminController extends Member
} }
$args->group_srl = !empty($args->group_srl) ? $args->group_srl : getNextSequence(); $args->group_srl = !empty($args->group_srl) ? $args->group_srl : getNextSequence();
$args->list_order = $args->list_order ?? $args->group_srl; $args->list_order = $args->list_order ?? $args->group_srl;
$args->title = escape($args->title);
$args->description = escape($args->description);
$output = executeQuery('member.insertGroup', $args); $output = executeQuery('member.insertGroup', $args);
if ($output->toBool()) if ($output->toBool())
@ -1407,6 +1409,8 @@ class MemberAdminController extends Member
$output = executeQuery('member.updateGroupDefaultClear', $args); $output = executeQuery('member.updateGroupDefaultClear', $args);
if(!$output->toBool()) return $output; if(!$output->toBool()) return $output;
} }
$args->title = isset($args->title) ? escape($args->title) : null;
$args->description = isset($args->description) ? escape($args->description) : null;
$output = executeQuery('member.updateGroup', $args); $output = executeQuery('member.updateGroup', $args);
if ($output->toBool()) if ($output->toBool())