jilo-web/app/includes/sanitize.php

<?php

// sanitize all input vars that may end up in URLs or forms

$platform_id = htmlspecialchars($_REQUEST['platform'] ?? '');
if (isset($_REQUEST['page'])) {
    $page = htmlspecialchars($_REQUEST['page']);
} else {
    $page = 'dashboard';
}
if (isset($_REQUEST['item'])) {
    $item = htmlspecialchars($_REQUEST['item']);
} else {
    $item = '';
}

if (isset($_REQUEST['from_time'])) {
    $from_time = htmlspecialchars($_REQUEST['from_time']);
}
if (isset($_REQUEST['until_time'])) {
    $until_time = htmlspecialchars($_REQUEST['until_time']);
}

// sanitize session vars
if (isset($_SESSION)) {
    foreach ($_SESSION as $key => $value) {
        if (is_string($value)) {
            $_SESSION[$key] = htmlspecialchars($value);
        }
    }
}

// hosts
if (isset($_POST['address'])) {
    $address = htmlspecialchars($_POST['address']);
}
if (isset($_POST['port'])) {
    $port = htmlspecialchars($_POST['port']);
}
if (isset($_POST['name'])) {
    $name = htmlspecialchars($_POST['name']);
}

// agents
if (isset($_POST['type'])) {
    $type = htmlspecialchars($_POST['type']);
}
if (isset($_POST['url'])) {
    $url = htmlspecialchars($_POST['url']);
}
if (isset($_POST['secret_key'])) {
    $secret_key = htmlspecialchars($_POST['secret_key']);
}
if (isset($_POST['check_period'])) {
    $check_period = htmlspecialchars($_POST['check_period']);
}

// platforms
if (isset($_POST['name'])) {
    $name = htmlspecialchars($_POST['name']);
}


?>