improv. remove xss array in permission request (#305)

MineWeb · Dec 11, 2021 · ec9a384 · ec9a384
1 parent 0729df0
commit ec9a384
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/Controller/PermissionsController.php b/app/Controller/PermissionsController.php
@@ -20,6 +20,9 @@ function admin_index()
         if ($this->request->is('post')) {
             $permissions = [];
             foreach ($this->request->data as $permission => $checked) {
+                if(is_array($checked))
+                    continue;
+
                 list($permission, $rank) = explode('-', $permission);
                 $permissions[$rank][] = $permission;
             }