fix some security issues + change username min length to 3

2026-04-24 12:07:23 +08:00 · 2022-12-08 20:43:33 +08:00
parent a0fb2c61d0
commit a39067021c
14 changed files with 83 additions and 50 deletions
@@ -2,7 +2,7 @@
 require "../include/bittorrent.php";

 $query = \App\Models\UserBanLog::query();
-$q = $_REQUEST['q'] ?? '';
+$q = htmlspecialchars($_REQUEST['q'] ?? '');
 if (!empty($q)) {
    $query->where('username', 'like', "%{$q}%");
 }