Эх сурвалжийг харах

If numeric then don't need to escape

Numeric should be safe as a pass thru.
FusionPBX 2 жил өмнө
parent
commit
51aa2ce3a9

+ 4 - 1
resources/functions.php

@@ -1892,9 +1892,12 @@ function number_pad($number,$n) {
 
 //escape user data
 	function escape($string) {
-		if (is_string($string) || is_numeric($string)) {
+		if (is_string($string)) {
 			return htmlentities($string, ENT_QUOTES | ENT_HTML5, 'UTF-8');
 		}
+		elseif (is_numeric($string)) {
+			return $string;
+		}
 		else {
 			$string = (array) $string;
 			if (is_string($string[0])) {