diff options
| author | Bart Visscher <bartv@thisnet.nl> | 2012-11-30 04:13:36 -0800 |
|---|---|---|
| committer | Bart Visscher <bartv@thisnet.nl> | 2012-11-30 04:13:36 -0800 |
| commit | a3f18d4b5ab0106bbfebb91928844fdd4f4c25e2 (patch) | |
| tree | 7ff840d1255e075ff1a6cc1ee6f0848470e2b9de /settings | |
| parent | 8aba5874db5049a69ade3c740b05f7462a589ef9 (diff) | |
| parent | 80d1037e427c31c165abead3696668bac8110413 (diff) | |
| download | nextcloud-server-a3f18d4b5ab0106bbfebb91928844fdd4f4c25e2.tar.gz nextcloud-server-a3f18d4b5ab0106bbfebb91928844fdd4f4c25e2.zip | |
Merge pull request #603 from owncloud/store_plain_groupname
Group name doesn't need to be sanitized before storing it in the database
Diffstat (limited to 'settings')
| -rw-r--r-- | settings/ajax/togglegroups.php | 2 | ||||
| -rw-r--r-- | settings/ajax/togglesubadmins.php | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/settings/ajax/togglegroups.php b/settings/ajax/togglegroups.php index 931ab2689e2..f82ece4aee1 100644 --- a/settings/ajax/togglegroups.php +++ b/settings/ajax/togglegroups.php @@ -5,7 +5,7 @@ OCP\JSON::callCheck(); $success = true; $username = $_POST["username"]; -$group = OC_Util::sanitizeHTML($_POST["group"]); +$group = $_POST["group"]; if($username == OC_User::getUser() && $group == "admin" && OC_Group::inGroup($username, 'admin')){ $l = OC_L10N::get('core'); diff --git a/settings/ajax/togglesubadmins.php b/settings/ajax/togglesubadmins.php index 7aaa90aad5f..a99e805f69d 100644 --- a/settings/ajax/togglesubadmins.php +++ b/settings/ajax/togglesubadmins.php @@ -4,7 +4,7 @@ OC_JSON::checkAdminUser(); OCP\JSON::callCheck(); $username = $_POST["username"]; -$group = OC_Util::sanitizeHTML($_POST["group"]); +$group = $_POST["group"]; // Toggle group if(OC_SubAdmin::isSubAdminofGroup($username, $group)) { |