tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Removed values safe_output and safe_input

This commit is contained in:
Enrique Martin 2024-02-07 02:53:31 +01:00
parent f69b1af3bd
commit ad0984d312
1 changed files with 12 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
pandora_console/include/class/Prd.class.php
View File

@ -1864,7 +1864,7 @@ class Prd
$result = db_get_row_sql($sql_column); $result = db_get_row_sql($sql_column);
if ($result !== false) { if ($result !== false) {
$value = io_safe_output($result); $value = $result;
$new_array = []; $new_array = [];
$new_array[$table] = $value; $new_array[$table] = $value;
$value = json_encode($new_array); $value = json_encode($new_array);
@ -1982,8 +1982,6 @@ class Prd
} }
} }
} }
} else {
$value = io_safe_output($value);
} }
// Scape double quotes in all values // Scape double quotes in all values
$value = str_replace('"', '\"', $value); $value = str_replace('"', '\"', $value);
@ -2159,7 +2157,7 @@ class Prd
if ($value !== false) { if ($value !== false) {
$new_array = []; $new_array = [];
$new_array[$condition['ref']['table']] = io_safe_output($value); $new_array[$condition['ref']['table']] = $value;
$json_array[$json_key] = $new_array; $json_array[$json_key] = $new_array;
} }
} }
@ -2181,13 +2179,11 @@ class Prd
$value = db_get_row_sql($sql_json); $value = db_get_row_sql($sql_json);
$new_array = []; $new_array = [];
$new_array[$json_values['ref']['table']] = io_safe_output($value); $new_array[$json_values['ref']['table']] = $value;
$json_array[$json_key] = $new_array; $json_array[$json_key] = $new_array;
} }
} }
} }
} else {
$value = io_safe_output($value);
} }
// Scape double quotes in all values // Scape double quotes in all values
$value = str_replace('"', '\"', $value); $value = str_replace('"', '\"', $value);
@ -2230,7 +2226,7 @@ class Prd
$value $value
); );
$result = io_safe_output(db_get_row_sql($sql)); $result = db_get_row_sql($sql);
$join = reset($data['join']); $join = reset($data['join']);
$result_deep = $this->recursiveJoin($join, $result[array_key_first($data['join'])]); $result_deep = $this->recursiveJoin($join, $result[array_key_first($data['join'])]);
@ -2247,7 +2243,7 @@ class Prd
$value $value
); );
$result_sql = io_safe_output(db_get_row_sql($sql)); $result_sql = db_get_row_sql($sql);
$result[$data['table']] = $result_sql; $result[$data['table']] = $result_sql;
} }
@ -2503,7 +2499,7 @@ class Prd
$where .= sprintf( $where .= sprintf(
"%s = '%s' AND ", "%s = '%s' AND ",
$column_name, $column_name,
io_safe_input($array_value[$ref['table']][$column_name]) $array_value[$ref['table']][$column_name]
); );
} }
} }
@ -2551,7 +2547,7 @@ class Prd
$where .= sprintf( $where .= sprintf(
"%s = '%s' AND ", "%s = '%s' AND ",
$column_name, $column_name,
io_safe_input($value[$ref['table']][$column_name]) $value[$ref['table']][$column_name]
); );
} }
} }
@ -2576,7 +2572,7 @@ class Prd
$where .= sprintf( $where .= sprintf(
"%s = '%s' AND ", "%s = '%s' AND ",
$column_name, $column_name,
io_safe_input($value[$ref[$key]['table']][$column_name]) $value[$ref[$key]['table']][$column_name]
); );
} }
} }
@ -3009,13 +3005,13 @@ class Prd
// Run each INSERT and store each value in $this->currentItem['last_autocreate'] overwriting. // Run each INSERT and store each value in $this->currentItem['last_autocreate'] overwriting.
$insert_query = db_process_sql_insert( $insert_query = db_process_sql_insert(
$insert['table'], $insert['table'],
io_safe_input($insert['fields']), $insert['fields'],
false false
); );
$last_autocreate = db_get_all_rows_filter( $last_autocreate = db_get_all_rows_filter(
$insert['table'], $insert['table'],
io_safe_input($insert['fields']), $insert['fields'],
$insert['id'] $insert['id']
); );
@ -3045,13 +3041,13 @@ class Prd
// Create item itself with INSERT query and store its value in $this->currentItem['value']. // Create item itself with INSERT query and store its value in $this->currentItem['value'].
$insert_query = db_process_sql_insert( $insert_query = db_process_sql_insert(
$table, $table,
io_safe_input($this->currentItem['parsed']), $this->currentItem['parsed'],
false false
); );
$insert = db_get_all_rows_filter( $insert = db_get_all_rows_filter(
$table, $table,
io_safe_input($this->currentItem['parsed']), $this->currentItem['parsed'],
$id $id
); );