Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Gapczynski <GapczynskiM@gmail.com>2012-05-09 17:23:19 +0400
committerMichael Gapczynski <GapczynskiM@gmail.com>2012-05-09 17:23:19 +0400
commit63cc1ccacd1908292854dd8ca35d6fb5009ddbbb (patch)
tree689be273b56655f22fddb05e1651081843bd05d9 /settings/ajax/togglegroups.php
parent588b51d88ac6ba9d4a6b2ee80aa7ee8bad88547f (diff)
Sanitize group in togglegroups
Diffstat (limited to 'settings/ajax/togglegroups.php')
-rw-r--r--settings/ajax/togglegroups.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/settings/ajax/togglegroups.php b/settings/ajax/togglegroups.php
index 3ee3239dd89..f76e22f51d2 100644
--- a/settings/ajax/togglegroups.php
+++ b/settings/ajax/togglegroups.php
@@ -10,7 +10,7 @@ $error = "add user to";
$action = "add";
$username = $_POST["username"];
-$group = $_POST["group"];
+$group = htmlentities($_POST["group"]);
if(!OC_Group::groupExists($group)){
OC_Group::createGroup($group);