force getting escaped user inputs

This commit is contained in:
Daniel Seifert 2025-01-15 13:17:43 +01:00
parent 032c2d5e4c
commit 178ad0b6da

View File

@ -43,13 +43,13 @@ class oeUserComponent extends oeUserComponent_parent
/* END check for Amazon Pay - no Captcha /
/* START check for PayPal Checkout - no Captcha */
if(\OxidEsales\Eshop\Core\Registry::getConfig()->getRequestParameter('fnc') == 'approveOrder')
if(\OxidEsales\Eshop\Core\Registry::getRequest()->getRequestEscapedParameter('fnc') == 'approveOrder')
{
return parent::createUser();
}
/* START check for PayPal Checkout - no Captcha */
if (\OxidEsales\Eshop\Core\Registry::getConfig()->getRequestParameter('cl') !== 'user' && !$this->getCaptcha()->passCaptcha()) {
if (\OxidEsales\Eshop\Core\Registry::getRequest()->getRequestEscapedParameter('cl') !== 'user' && !$this->getCaptcha()->passCaptcha()) {
return false;
}