sanitize all input against xss and fixed bug with time encoding when adding result

2022-06-21 23:35:06 +02:00
parent b0478a7dd4
commit 6d74360d1d
10 changed files with 68 additions and 41 deletions
--- a/app/public/add_station.php
+++ b/app/public/add_station.php
@@ -5,7 +5,9 @@
    $user_data = check_login($con);

    if($_SERVER['REQUEST_METHOD'] == "POST") {
-        write_station($con, $_POST['station_name'], $_POST['station_pos']);
+        $station_name = sanitize_input($_POST['station_name']);
+        $station_pos = sanitize_input($_POST['station_pos']);
+        write_station($con, $station_name, $station_pos);
        header("Location: stationen.php");
        die;
    }