diff --git a/include/membership.php b/include/membership.php
index a50637c..a310eeb 100644
--- a/include/membership.php
+++ b/include/membership.php
@@ -114,7 +114,7 @@ class Membership extends Renderer {
'Elektronischer Verarbeitung zugestimmg' => $formData['agreedElectronicalHandling']
];
$mail = $this->initSmtpMailer();
- $mail->setFrom($formData['email'], $formData['firstname'] . ' ' . $formData['lastname']);
+ $mail->setFrom('foerderverein-ajs@gmx.de');
$mail->addReplyTo($formData['email'], $formData['firstname'] . ' ' . $formData['lastname']);
$mail->addAddress('foerderverein-ajs@gmx.de', 'Vorstand Förderverein AJS');
$message = '';
diff --git a/include/renderer.php b/include/renderer.php
index a327582..b73470c 100644
--- a/include/renderer.php
+++ b/include/renderer.php
@@ -107,7 +107,7 @@ class Renderer {
}
public function render(): void {
- if (trim(filter_input(INPUT_POST, 'action', FILTER_SANITIZE_STRING)) !== '') {
+ if (trim(filter_input(INPUT_POST, 'action', FILTER_SANITIZE_FULL_SPECIAL_CHARS)) !== '') {
$this->formAction();
}
$this->website = file_get_contents('templates/page.html');
@@ -177,7 +177,7 @@ class Renderer {
}
protected function showInputField(array $errors, string $inputType, string $fieldName, int $fieldLength): void {
- echo '';
+ echo '';
if (isset($errors[$fieldName])) {
echo '' . $errors[$fieldName] . '';
}
@@ -300,7 +300,7 @@ class Renderer {
} elseif ($this->cleanFields) {
return '';
}
- $value = filter_input(INPUT_POST, $this->formFields[$index]['name'], FILTER_SANITIZE_STRING) ?: '';
+ $value = filter_input(INPUT_POST, $this->formFields[$index]['name'], FILTER_SANITIZE_FULL_SPECIAL_CHARS) ?: '';
if (trim($value) === '' && isset($this->predefines[$this->formFields[$index]['name']])) {
$value = $this->predefines[$this->formFields[$index]['name']];
}
@@ -314,7 +314,7 @@ class Renderer {
protected function formCheckFields(): bool {
foreach ($this->formFields as $field) {
- $value = filter_input(INPUT_POST, $field['name'], isset($field['filter']) ? $field['filter'] : FILTER_SANITIZE_STRING);
+ $value = filter_input(INPUT_POST, $field['name'], isset($field['filter']) ? $field['filter'] : FILTER_SANITIZE_FULL_SPECIAL_CHARS);
if (isset($field['optional']) && ($field['optional'] == false) && trim($value) === '' && $field['type'] !== 'file') {
$this->errors[$field['name']] = 'Das Feld darf nicht leer sein';
continue;