sanitize all input against xss and fixed bug with time encoding when adding result

2022-06-21 23:35:06 +02:00
parent b0478a7dd4
commit 6d74360d1d
10 changed files with 68 additions and 41 deletions
--- a/app/public/login.php
+++ b/app/public/login.php
@@ -4,8 +4,8 @@
    include("../scripts/functions.php");

    if($_SERVER['REQUEST_METHOD'] == "POST"){
-        $user_name = $_POST['user_name'];
-        $password = $_POST['password'];
+        $user_name = sanitize_input($_POST['user_name']);
+        $password = sanitize_input($_POST['password']);

        if(!empty($user_name) && !empty($password)) {
            $user_data = get_user_data_name($con, $user_name);