From: Andrew Dolgov <noreply@fakecake.org>
Date: Sun, 4 Feb 2018 06:33:28 +0000 (+0300)
Subject: savefeedorder, savefilterorder: do not use clean() on json payload
X-Git-Tag: 18.8~76
X-Git-Url: https://git.wh0rd.org/?p=tt-rss.git;a=commitdiff_plain;h=67bf38afda3f2c2d22db36d1b7ad67962c3a5bec

savefeedorder, savefilterorder: do not use clean() on json payload
---

diff --git a/classes/pref/feeds.php b/classes/pref/feeds.php
old mode 100644
new mode 100755
index 30bfbc19..245eea04
--- a/classes/pref/feeds.php
+++ b/classes/pref/feeds.php
@@ -389,7 +389,7 @@ class Pref_Feeds extends Handler_Protected {
 	}
 
 	function savefeedorder() {
-		$data = json_decode(clean($_POST['payload']), true);
+		$data = json_decode($_POST['payload'], true);
 
 		#file_put_contents("/tmp/saveorder.json", clean($_POST['payload']));
 		#$data = json_decode(file_get_contents("/tmp/saveorder.json"), true);
diff --git a/classes/pref/filters.php b/classes/pref/filters.php
index eb41bab4..d87df097 100755
--- a/classes/pref/filters.php
+++ b/classes/pref/filters.php
@@ -16,7 +16,7 @@ class Pref_Filters extends Handler_Protected {
 	}
 
 	function savefilterorder() {
-		$data = json_decode(clean($_POST['payload']), true);
+		$data = json_decode($_POST['payload'], true);
 
 		#file_put_contents("/tmp/saveorder.json", clean($_POST['payload']));
 		#$data = json_decode(file_get_contents("/tmp/saveorder.json"), true);
@@ -1243,4 +1243,4 @@ class Pref_Filters extends Handler_Protected {
 
 		$this->pdo->commit();
 	}
-}
\ No newline at end of file
+}