diff --git a/sources/admin.queries.php b/sources/admin.queries.php index 0c214d50b..df6bb4bb6 100755 --- a/sources/admin.queries.php +++ b/sources/admin.queries.php @@ -2687,7 +2687,7 @@ ); // prepare data - $post_value = filter_var($dataReceived['value'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); + $post_value = filter_var($dataReceived['value'], FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES); $post_field = filter_var($dataReceived['field'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); require_once 'main.functions.php'; diff --git a/sources/ldap.queries.php b/sources/ldap.queries.php index 68a50566c..1b78bf9f2 100755 --- a/sources/ldap.queries.php +++ b/sources/ldap.queries.php @@ -137,7 +137,7 @@ // prepare variables $post_username = filter_var($dataReceived['username'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); - $post_password = filter_var($dataReceived['password'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); + $post_password = filter_var($dataReceived['password'], FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES); // Build ldap configuration array $config = [