forge-joniko/ldc-groupe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prevent xss attacks on ldc-message, clear inputs

Browse source
This commit is contained in:
Jérémy Munsch 2024-06-18 10:22:59 +02:00
parent 9ef74de4c9
commit c081bca2ca
No known key found for this signature in database
GPG key ID: 18361AF3BFEC0FEC
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
content/plugins/ldc-messages/ldc-messages.php
View file

@ -232,6 +232,11 @@ function ContactAjx()
$content .= ucfirst($key) . " : " . $item . "\n\r";
}
}
// ! Freaking sanitize inputs
$firstname = strip_tags($firstname);
$lastname = strip_tags($lastname);
$email = strip_tags($email);
$content = strip_tags($content);
$ref = date('ymd') . '-' . generateRandomString(4);