From ebf541ab917a630c7300464a8e4a675d6b2e0f01 Mon Sep 17 00:00:00 2001
From: billchenchina <billchenchina2001@gmail.com>
Date: Thu, 9 Sep 2021 21:25:44 +0800
Subject: [PATCH] fix(web): json_encode for input enter in /user/msg

This commit fixes #79.
Ref: https://huntr.dev/bounties/a2b63a25-385f-4f4e-b790-d910b90718f7/
---
 web/app/controllers/user_msg.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/app/controllers/user_msg.php b/web/app/controllers/user_msg.php
index 070ae321d..4513cbb81 100644
--- a/web/app/controllers/user_msg.php
+++ b/web/app/controllers/user_msg.php
@@ -151,7 +151,7 @@ function deleteMsg($msgId) {
 	$.ajaxSetup({async:false});
 	refreshConversations();
 	<?php if (isset($_GET['enter'])): ?>
-	enterConversation("<?= $_GET['enter'] ?>");
+	enterConversation(<?= json_encode($_GET['enter']) ?>);
 	<?php endif ?>
 });
 </script>