Sanitize the domain setting category

2025-12-30 00:53:50 +00:00 · 2025-05-08 09:07:06 -06:00
parent a88062fb1e
commit 21846c760d
1 changed files with 5 additions and 0 deletions
--- a/core/domain_settings/domain_setting_edit.php
+++ b/core/domain_settings/domain_setting_edit.php
@@ -88,6 +88,11 @@
 		$domain_setting_description = $_POST["domain_setting_description"];
 	}

+//sanitize the variables
+	if (!empty($domain_setting_category)) {
+		$domain_setting_category = preg_replace('#[^a-zA-Z0-9_\-\. ]#', '', $domain_setting_category);
+	}
+
 //process the data
 	if (!empty($_POST) && empty($_POST["persistformvar"])) {