* List name can have @ and # symbols - revert partially [e34b90f]

This commit is contained in:
Max Pozdeev 2020-09-05 17:07:39 +03:00
parent c27c487017
commit 4757842448

View file

@ -378,7 +378,7 @@ elseif(isset($_GET['addList']))
stop_gpc($_POST);
$t = array();
$t['total'] = 0;
$name = str_replace(array('"',"'",'<','>','&','@','#'),array('','','','','','',''),trim(_post('name')));
$name = str_replace( array('"',"'",'<','>','&'), '', trim(_post('name')) );
$ow = 1 + (int)$db->sq("SELECT MAX(ow) FROM {$db->prefix}lists");
$db->dq("INSERT INTO {$db->prefix}lists (uuid,name,ow,d_created,d_edited,taskview) VALUES (?,?,?,?,?,?)",
array(generateUUID(), $name, $ow, time(), time(), 1) );