From a42ed9f48b667077bd5dd46121087dee85311008 Mon Sep 17 00:00:00 2001 From: CauseFX Date: Sat, 9 Apr 2022 20:18:43 -0700 Subject: [PATCH] sanitized username for logging functions --- api/functions/log-functions.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/api/functions/log-functions.php b/api/functions/log-functions.php index 9a5255f59..defa8b02d 100644 --- a/api/functions/log-functions.php +++ b/api/functions/log-functions.php @@ -211,6 +211,9 @@ public function setLoggerChannel($channel = 'Organizr', $username = null) { if ($this->hasDB()) { $setLogger = false; + if ($username) { + $username = filter_var($username, FILTER_SANITIZE_STRING); + } if ($this->logger) { if ($channel) { if (strtolower($this->logger->getChannel()) !== strtolower($channel)) {