3.0.7

Fix for #3699
nilsteampassnet · May 4, 2023 · fc0edc8 · fc0edc8
1 parent 31421cf
commit fc0edc8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/sources/admin.queries.php b/sources/admin.queries.php
@@ -2687,7 +2687,7 @@
         );
 
         // prepare data
-        $post_value = filter_var($dataReceived['value'], FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+        $post_value = filter_var($dataReceived['value'], FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES);
         $post_field = filter_var($dataReceived['field'], FILTER_SANITIZE_FULL_SPECIAL_CHARS);
 
         require_once 'main.functions.php';

diff --git a/sources/ldap.queries.php b/sources/ldap.queries.php
@@ -137,7 +137,7 @@
 
         // prepare variables
         $post_username = filter_var($dataReceived['username'], FILTER_SANITIZE_FULL_SPECIAL_CHARS);
-        $post_password = filter_var($dataReceived['password'], FILTER_SANITIZE_FULL_SPECIAL_CHARS);
+        $post_password = filter_var($dataReceived['password'], FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES);
 
         // Build ldap configuration array
         $config = [