diff --git a/src/api/wishes.php b/src/api/wishes.php index ef742d76..5127ca50 100644 --- a/src/api/wishes.php +++ b/src/api/wishes.php @@ -95,7 +95,7 @@ switch ($_SERVER['REQUEST_METHOD']) { $wish_description = addslashes(filter_input(INPUT_POST, 'wish_description', FILTER_SANITIZE_SPECIAL_CHARS)); $wish_image = addslashes(filter_input(INPUT_POST, 'wish_image', FILTER_SANITIZE_URL)); $wish_url = addslashes(filter_input(INPUT_POST, 'wish_url', FILTER_SANITIZE_URL)); - $wish_priority = addslashes(filter_input(INPUT_POST, 'wish_priority', FILTER_SANITIZE_NUMBER_INT)); + $wish_priority = filter_input(INPUT_POST, 'wish_priority', FILTER_SANITIZE_NUMBER_INT); $wish_is_purchasable = isset($_POST['wish_is_purchasable']); if (Wish::NO_IMAGE === $wish_image) { @@ -140,6 +140,7 @@ switch ($_SERVER['REQUEST_METHOD']) { $wish_description = empty($wish_description) ? null : $wish_description ; $wish_image = empty($wish_image) || Wish::NO_IMAGE === $wish_image ? null : $wish_image ; $wish_url = empty($wish_url) ? null : $wish_url ; + $wish_priority = empty($wish_priority) ? null : $wish_priority ; $database ->query( diff --git a/src/classes/wishthis/Wish.php b/src/classes/wishthis/Wish.php index 13152449..e8ddbcab 100644 --- a/src/classes/wishthis/Wish.php +++ b/src/classes/wishthis/Wish.php @@ -178,7 +178,7 @@ class Wish = $this->getCardImage() ?>