diff --git a/settings/ajax/togglegroups.php b/settings/ajax/togglegroups.php index 931ab2689e25aae8aebceab243845b90775b1c89..f82ece4aee1464b47ba3c253fab507fef2daa9de 100644 --- a/settings/ajax/togglegroups.php +++ b/settings/ajax/togglegroups.php @@ -5,7 +5,7 @@ OCP\JSON::callCheck(); $success = true; $username = $_POST["username"]; -$group = OC_Util::sanitizeHTML($_POST["group"]); +$group = $_POST["group"]; if($username == OC_User::getUser() && $group == "admin" && OC_Group::inGroup($username, 'admin')){ $l = OC_L10N::get('core'); diff --git a/settings/ajax/togglesubadmins.php b/settings/ajax/togglesubadmins.php index 7aaa90aad5fbd1ae159d6062c85e6266bdb2f570..a99e805f69dff88ec3d1cd04636d409584975fbc 100644 --- a/settings/ajax/togglesubadmins.php +++ b/settings/ajax/togglesubadmins.php @@ -4,7 +4,7 @@ OC_JSON::checkAdminUser(); OCP\JSON::callCheck(); $username = $_POST["username"]; -$group = OC_Util::sanitizeHTML($_POST["group"]); +$group = $_POST["group"]; // Toggle group if(OC_SubAdmin::isSubAdminofGroup($username, $group)) {