sascha
/
nextcloud-server
mirror of https://github.com/nextcloud/server.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #603 from owncloud/store_plain_groupname 

Group name doesn't need to be sanitized before storing it in the database
remotes/origin/stable5
Bart Visscher 2012-11-30 04:13:36 +07:00
parent 8aba5874db 80d1037e42
commit a3f18d4b5a
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
settings/ajax/togglegroups.php
Unescape Escape View File

@ -5,7 +5,7 @@ OCP\JSON::callCheck();
$success = true;
$username = $_POST["username"];
$group = OC_Util::sanitizeHTML($_POST["group"]);
$group = $_POST["group"];
if($username == OC_User::getUser() && $group == "admin" && OC_Group::inGroup($username, 'admin')){
$l = OC_L10N::get('core');

2
settings/ajax/togglesubadmins.php
Unescape Escape View File

@ -4,7 +4,7 @@ OC_JSON::checkAdminUser();
OCP\JSON::callCheck();
$username = $_POST["username"];
$group = OC_Util::sanitizeHTML($_POST["group"]);
$group = $_POST["group"];
// Toggle group
if(OC_SubAdmin::isSubAdminofGroup($username, $group)) {