Add scheme input protection in frio/config.php

- Addresses https://github.com/friendica/friendica/issues/6338#issuecomment-464912016

diff --git a/view/theme/frio/config.php b/view/theme/frio/config.php
index f73ef3ab0a195114158e75704596b51791343bfa..dcf38d42362cd50b23df90beddba7dc3e4573163 100644 (file)
--- a/view/theme/frio/config.php
+++ b/view/theme/frio/config.php
@@ -35,16 +35,16 @@ function theme_admin_post(App $a)
        }
 
        if (isset($_POST['frio-settings-submit'])) {
-               Config::set('frio', 'scheme',           $_POST['frio_scheme']);
-               Config::set('frio', 'nav_bg',           $_POST['frio_nav_bg']);
-               Config::set('frio', 'nav_icon_color',   $_POST['frio_nav_icon_color']);
-               Config::set('frio', 'link_color',       $_POST['frio_link_color']);
-               Config::set('frio', 'background_color', $_POST['frio_background_color']);
-               Config::set('frio', 'contentbg_transp', $_POST['frio_contentbg_transp']);
-               Config::set('frio', 'background_image', $_POST['frio_background_image']);
-               Config::set('frio', 'bg_image_option',  $_POST['frio_bg_image_option']);
-               Config::set('frio', 'login_bg_image',   $_POST['frio_login_bg_image']);
-               Config::set('frio', 'login_bg_color',   $_POST['frio_login_bg_color']);
+               Config::set('frio', 'scheme',           defaults($_POST, 'frio_scheme', ''));
+               Config::set('frio', 'nav_bg',           defaults($_POST, 'frio_nav_bg', ''));
+               Config::set('frio', 'nav_icon_color',   defaults($_POST, 'frio_nav_icon_color', ''));
+               Config::set('frio', 'link_color',       defaults($_POST, 'frio_link_color', ''));
+               Config::set('frio', 'background_color', defaults($_POST, 'frio_background_color', ''));
+               Config::set('frio', 'contentbg_transp', defaults($_POST, 'frio_contentbg_transp', ''));
+               Config::set('frio', 'background_image', defaults($_POST, 'frio_background_image', ''));
+               Config::set('frio', 'bg_image_option',  defaults($_POST, 'frio_bg_image_option', ''));
+               Config::set('frio', 'login_bg_image',   defaults($_POST, 'frio_login_bg_image', ''));
+               Config::set('frio', 'login_bg_color',   defaults($_POST, 'frio_login_bg_color', ''));
                Config::set('frio', 'css_modified',     time());
        }
 }