sanitize all input against xss and fixed bug with time encoding when adding result

2022-06-21 23:35:06 +02:00
parent b0478a7dd4
commit 6d74360d1d
10 changed files with 68 additions and 41 deletions
--- a/app/public/add_team.php
+++ b/app/public/add_team.php
@@ -5,7 +5,9 @@
    $user_data = check_login($con);

    if($_SERVER['REQUEST_METHOD'] == "POST") {
-        write_team($con, $_POST['team_name'], $_POST['fire_department']);
+        $team_name = sanitize_input($_POST['team_name']);
+        $fire_department = sanitize_input($_POST['fire_department']);
+        write_team($con, $team_name, $fire_department);
        header("Location: mannschaft.php");
        die;      
    }