Sanitise get params

NamelessMC · Mar 8, 2024 · 90f00d1 · 90f00d1
1 parent 005d84e
commit 90f00d1
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/custom/panel_templates/Default/template.php b/custom/panel_templates/Default/template.php
@@ -306,19 +306,19 @@ public function onPageLoad() {
 
                             $url_parameters = [];
                             if (isset($_GET['group'])) {
-                                $url_parameters[] = 'group=' . $_GET['group'];
+                                $url_parameters[] = 'group=' . Output::getClean($_GET['group']);
                             }
 
                             if (isset($_GET['integration'])) {
-                                $url_parameters[] = 'integration=' . $_GET['integration'];
+                                $url_parameters[] = 'integration=' . Output::getClean($_GET['integration']);
                             }
 
                             if (isset($_GET['banned'])) {
-                                $url_parameters[] = 'banned=' . $_GET['banned'];
+                                $url_parameters[] = 'banned=' . Output::getClean($_GET['banned']);
                             }
 
                             if (isset($_GET['active'])) {
-                                $url_parameters[] = 'active=' . $_GET['active'];
+                                $url_parameters[] = 'active=' . Output::getClean($_GET['active']);
                             }
 
                             $this->addJSScript('