2.1.27

Fix for #1923 and #1924
nilsteampassnet · Sep 25, 2017 · bc59191 · bc59191
1 parent c601889
commit bc59191
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/changelog.md b/changelog.md
@@ -9,6 +9,8 @@
  Configuration variables are not set in SESSION anymore. Now read from tp.config.php file.
  Fix: issue on offline export
  Fix: error on deleting a folder at root
+ #1924 Moving items give error: Requested JSON parse failed
+ #1923 Red wheel keeps turning, blocks display of new items
  #1919 Upgrade to release 2.1.27.8 converts encrypted database password back to clear-text
  #1915 Cannot Edit or Delete items in the Personal folder
  #1909 Roles Management - Problem with acess rights "Edit" "Delete"

diff --git a/sources/items.queries.php b/sources/items.queries.php
@@ -2223,10 +2223,10 @@
             } else {
                 // get preloaded data
                 $uniqueLoadData = json_decode(
-                    filter_input(INPUT_POST, 'uniqueLoadData', FILTER_SANITIZE_STRING),
+                    filter_input(INPUT_POST, 'uniqueLoadData', FILTER_UNSAFE_RAW),
                     true
                 );
-
+                
                 // initialize main variables
                 $showError = $uniqueLoadData['showError'];
                 $accessLevel = $uniqueLoadData['accessLevel'];
@@ -3083,7 +3083,7 @@
                 'at_moved : '.$dataSource['title'].' -> '.$dataDestination['title']
             );
 
-            echo '[{"from_folder":"'.$dataSource['id_tree'].'" , "to_folder":"'.$folder_id.'"}]';
+            echo '[{"from_folder":"'.$dataSource['id_tree'].'" , "to_folder":"'.$post_folder_id.'"}]';
             break;
 
         /*