Sécurité

server_files/controllers/informations.php

@@ -88,7 +88,7 @@ class AttributeTeam
 
 	public function __construct($data)
 	{
-		$this->team_id = $data["team"];
+		$this->team_id = htmlspecialchars($data["team"]);
 		$this->team = Team::fromId($this->team_id);
 	}
 
@@ -148,7 +148,7 @@ class ValidatePayment
 		global $user;
 
 		foreach ($data as $key => $value)
-			$this->$key = $value;
+			$this->$key = htmlspecialchars($value);
 
 		$this->payment = $user->getPayment();
 	}

server_files/controllers/paiement.php

@@ -36,7 +36,7 @@ class Pay {
     public function __construct($data)
     {
         foreach ($data as $key => $value)
-            $this->$key = $value;
+            $this->$key = htmlspecialchars($value);
 
         $this->method = PaymentMethod::fromName(strtoupper($this->method));