Merge pull request #603 from owncloud/store_plain_groupname

Group name doesn't need to be sanitized before storing it in the database
remotes/origin/stable5
Bart Visscher 14 years ago
commit a3f18d4b5a
  1. 2
      settings/ajax/togglegroups.php
  2. 2
      settings/ajax/togglesubadmins.php

@ -5,7 +5,7 @@ OCP\JSON::callCheck();
$success = true;
$username = $_POST["username"];
$group = OC_Util::sanitizeHTML($_POST["group"]);
$group = $_POST["group"];
if($username == OC_User::getUser() && $group == "admin" && OC_Group::inGroup($username, 'admin')){
$l = OC_L10N::get('core');

@ -4,7 +4,7 @@ OC_JSON::checkAdminUser();
OCP\JSON::callCheck();
$username = $_POST["username"];
$group = OC_Util::sanitizeHTML($_POST["group"]);
$group = $_POST["group"];
// Toggle group
if(OC_SubAdmin::isSubAdminofGroup($username, $group)) {

Loading…
Cancel
Save