From 4757842448f9406f4859091fba1d57787da6a592 Mon Sep 17 00:00:00 2001 From: Max Pozdeev Date: Sat, 5 Sep 2020 17:07:39 +0300 Subject: [PATCH] * List name can have @ and # symbols - revert partially [e34b90f] --- src/ajax.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/ajax.php b/src/ajax.php index 6460317..a7b44c7 100644 --- a/src/ajax.php +++ b/src/ajax.php @@ -378,7 +378,7 @@ elseif(isset($_GET['addList'])) stop_gpc($_POST); $t = array(); $t['total'] = 0; - $name = str_replace(array('"',"'",'<','>','&','@','#'),array('','','','','','',''),trim(_post('name'))); + $name = str_replace( array('"',"'",'<','>','&'), '', trim(_post('name')) ); $ow = 1 + (int)$db->sq("SELECT MAX(ow) FROM {$db->prefix}lists"); $db->dq("INSERT INTO {$db->prefix}lists (uuid,name,ow,d_created,d_edited,taskview) VALUES (?,?,?,?,?,?)", array(generateUUID(), $name, $ow, time(), time(), 1) );