Merge pull request #11 from GiuseppeArcifa/fix/PRESS10-12

Fix: preveneted PHP 8.2 deprecated 'FILTER_SANITIZE_STRING'
newfold-labs · Nov 6, 2024 · 539f868 · 539f868
2 parents 9bbba15 + 8bb11a5
commit 539f868
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/includes/SSO_AJAX_Handler.php b/includes/SSO_AJAX_Handler.php
@@ -25,16 +25,16 @@ public function __construct() {
 	 * Handle SSO login attempts.
 	 */
 	public function login() {
-		SSO_Helpers::handleLogin( filter_input( INPUT_GET, 'token', FILTER_SANITIZE_STRING ) );
+		SSO_Helpers::handleLogin( htmlspecialchars( strip_tags( filter_input( INPUT_GET, 'token' ) ) ) );
 	}
 
 	/**
 	 * Handle legacy SSO login attempts.
 	 */
 	public function legacyLogin() {
 
-		$nonce = filter_input( INPUT_GET, 'nonce', FILTER_SANITIZE_STRING );
-		$salt  = filter_input( INPUT_GET, 'salt', FILTER_SANITIZE_STRING );
+		$nonce = htmlspecialchars( strip_tags( filter_input( INPUT_GET, 'nonce' ) ) );
+		$salt  = htmlspecialchars( strip_tags( filter_input( INPUT_GET, 'salt' ) ) );
 
 		SSO_Helpers_Legacy::handleLegacyLogin( $nonce, $salt );
 	}