diff --git a/main/session/session_category_list.php b/main/session/session_category_list.php index c2cde7a90e..59ba09de10 100644 --- a/main/session/session_category_list.php +++ b/main/session/session_category_list.php @@ -27,8 +27,12 @@ $tbl_session_category = Database::get_main_table(TABLE_MAIN_SESSION_CATEGORY); $tbl_session = Database::get_main_table(TABLE_MAIN_SESSION); $page = isset($_GET['page']) ? intval($_GET['page']) : null; -$action = isset($_REQUEST['action']) ? Security::remove_XSS($_REQUEST['action']) : null; -$sort = isset($_GET['sort']) && in_array($_GET['sort'], ['name', 'nbr_session', 'date_start', 'date_end']) ? Security::remove_XSS($_GET['sort']) : 'name'; +$action = isset($_REQUEST['action']) + ? Security::remove_XSS($_REQUEST['action']) + : null; +$sort = isset($_GET['sort']) && in_array($_GET['sort'], ['name', 'nbr_session', 'date_start', 'date_end']) + ? Security::remove_XSS($_GET['sort']) + : 'name'; $idChecked = isset($_REQUEST['idChecked']) ? Security::remove_XSS($_REQUEST['idChecked']) : null; $order = isset($_REQUEST['order']) ? Security::remove_XSS($_REQUEST['order']) : 'ASC'; $keyword = isset($_REQUEST['keyword']) ? Security::remove_XSS($_REQUEST['keyword']) : null; @@ -46,7 +50,7 @@ $interbreadcrumb[] = ['url' => 'session_list.php', 'name' => get_lang('SessionLi if (isset($_GET['search']) && $_GET['search'] == 'advanced') { $interbreadcrumb[] = ["url" => 'session_category_list.php', "name" => get_lang('ListSessionCategory')]; $tool_name = get_lang('SearchASession'); - Display :: display_header($tool_name); + Display::display_header($tool_name); $form = new FormValidator('advanced_search', 'get'); $form->addElement('header', '', $tool_name); $active_group = []; @@ -64,9 +68,9 @@ if (isset($_GET['search']) && $_GET['search'] == 'advanced') { //if user is crfp admin only list its sessions $where = null; if (!api_is_platform_admin()) { - $where .= (empty($keyword) ? "" : " WHERE name LIKE '%".Database::escape_string(trim($_REQUEST['keyword']))."%'"); + $where .= empty($keyword) ? "" : " WHERE name LIKE '%".Database::escape_string(trim($_REQUEST['keyword']))."%'"; } else { - $where .= (empty($keyword) ? "" : " WHERE name LIKE '%".Database::escape_string(trim($_REQUEST['keyword']))."%'"); + $where .= empty($keyword) ? "" : " WHERE name LIKE '%".Database::escape_string(trim($_REQUEST['keyword']))."%'"; } if (empty($where)) { $where = " WHERE access_url_id = ".api_get_current_access_url_id()." "; @@ -102,27 +106,35 @@ if (isset($_GET['search']) && $_GET['search'] == 'advanced') {