浏览代码

If numeric then don't need to escape

Numeric should be safe as a pass thru.
FusionPBX 2 年之前
父节点
当前提交
51aa2ce3a9
共有 1 个文件被更改,包括 4 次插入1 次删除
  1. 4 1
      resources/functions.php

+ 4 - 1
resources/functions.php

@@ -1892,9 +1892,12 @@ function number_pad($number,$n) {
 
 //escape user data
 	function escape($string) {
-		if (is_string($string) || is_numeric($string)) {
+		if (is_string($string)) {
 			return htmlentities($string, ENT_QUOTES | ENT_HTML5, 'UTF-8');
 		}
+		elseif (is_numeric($string)) {
+			return $string;
+		}
 		else {
 			$string = (array) $string;
 			if (is_string($string[0])) {