Sanitize group in togglegroups

14 years ago · 63cc1ccacd
parent 588b51d88a
commit 63cc1ccacd
1 changed files with 1 additions and 1 deletions
--- a/settings/ajax/togglegroups.php
+++ b/settings/ajax/togglegroups.php
@ -10,7 +10,7 @@ $error = "add user to";
 $action = "add";

 $username = $_POST["username"];
-$group = $_POST["group"];
+$group = htmlentities($_POST["group"]);

 if(!OC_Group::groupExists($group)){
 	OC_Group::createGroup($group);