diff options
| author | Bart Visscher <bartv@thisnet.nl> | 2012-11-27 20:22:45 +0100 |
|---|---|---|
| committer | Bart Visscher <bartv@thisnet.nl> | 2012-11-27 20:22:45 +0100 |
| commit | 80d1037e427c31c165abead3696668bac8110413 (patch) | |
| tree | 6ecb9b0e6a09bf3e2488c75ad2f9cc46185a54d8 /settings/ajax/togglesubadmins.php | |
| parent | 71e8755d318eb9a415b15f5775506ecf8a8d134f (diff) | |
| download | nextcloud-server-80d1037e427c31c165abead3696668bac8110413.tar.gz nextcloud-server-80d1037e427c31c165abead3696668bac8110413.zip | |
Group name does't need to be sanitized before storing it in the database
It should only be sanitized before display
Diffstat (limited to 'settings/ajax/togglesubadmins.php')
| -rw-r--r-- | settings/ajax/togglesubadmins.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/settings/ajax/togglesubadmins.php b/settings/ajax/togglesubadmins.php index 7aaa90aad5f..a99e805f69d 100644 --- a/settings/ajax/togglesubadmins.php +++ b/settings/ajax/togglesubadmins.php @@ -4,7 +4,7 @@ OC_JSON::checkAdminUser(); OCP\JSON::callCheck(); $username = $_POST["username"]; -$group = OC_Util::sanitizeHTML($_POST["group"]); +$group = $_POST["group"]; // Toggle group if(OC_SubAdmin::isSubAdminofGroup($username, $group)) { |