fix some security issues + change username min length to 3

2026-04-24 12:07:23 +08:00 · 2022-12-08 20:43:33 +08:00
parent a0fb2c61d0
commit a39067021c
14 changed files with 83 additions and 50 deletions
@@ -34,7 +34,7 @@ foreach ($allStatus as $key => $value) {
 }

 print("<p>" . implode(' | ', $headerFilters) . "</p>");
-$q = $_GET['q'] ?? '';
+$q = htmlspecialchars($_GET['q'] ?? '');
 $filterForm = <<<FORM
 <form id="filterForm" action="{$_SERVER['REQUEST_URI']}" method="get">
    <input id="q" type="text" name="q" value="{$q}" placeholder="{$lang_myhr['th_hr_id']}">