From 7cefa9ac3744b016397b0d06893fc8504277ce32 Mon Sep 17 00:00:00 2001
From: Konstantin Protzen <code@kondev.de>
Date: Sat, 23 Sep 2023 00:36:25 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20=F0=9F=92=A9=20Fix=20Parameter?=
 =?UTF-8?q?=20Security=20Disimprovements=20#16?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 classes/add/index.php   | 7 -------
 homework/add/index.php  | 7 -------
 homework/edit/index.php | 7 -------
 3 files changed, 21 deletions(-)

diff --git a/classes/add/index.php b/classes/add/index.php
index ac87fa4..5cf0140 100644
--- a/classes/add/index.php
+++ b/classes/add/index.php
@@ -1,11 +1,5 @@
 <?php
 
-// Check if class url-parameter is given
-if (!isset($_GET["class"])) header("Location: /classes");
-$class_id = htmlspecialchars($_GET["class"]);
-// Check if class is a-z or 0-9
-if (!preg_match("/^[a-z0-9]*$/", $class_id)) header("Location: /classes");
-
 // Check login state
 require("../../res/php/session.php");
 start_session();
@@ -138,7 +132,6 @@
         <div class="class_add">
             <div>Create class <i class="fas fa-plus"></i></div>
         </div>
-        <div id="class_id" style="display: none;"><?= $class_id ?></div>
     </main>
     <script src="https://assets.noten-app.de/js/jquery/jquery-3.6.1.min.js"></script>
     <script src="https://assets.noten-app.de/js/themes/themes.js"></script>
diff --git a/homework/add/index.php b/homework/add/index.php
index f986a61..a393ec3 100644
--- a/homework/add/index.php
+++ b/homework/add/index.php
@@ -1,11 +1,5 @@
 <?php
 
-// Check if class url-parameter is given
-if (!isset($_GET["class"])) header("Location: /classes");
-$class_id = htmlspecialchars($_GET["class"]);
-// Check if class is a-z or 0-9
-if (!preg_match("/^[a-z0-9]*$/", $class_id)) header("Location: /classes");
-
 // Check login state
 require("../../res/php/session.php");
 start_session();
@@ -144,7 +138,6 @@
         <div class="class_add">
             <div>Add task <i class="fas fa-plus"></i></div>
         </div>
-        <div id="class_id" style="display: none;"><?= $class_id ?></div>
     </main>
     <script src="https://assets.noten-app.de/js/jquery/jquery-3.6.1.min.js"></script>
     <script src="https://assets.noten-app.de/js/themes/themes.js"></script>
diff --git a/homework/edit/index.php b/homework/edit/index.php
index 9874e59..4caef15 100644
--- a/homework/edit/index.php
+++ b/homework/edit/index.php
@@ -1,11 +1,5 @@
 <?php
 
-// Check if class url-parameter is given
-if (!isset($_GET["class"])) header("Location: /classes");
-$class_id = htmlspecialchars($_GET["class"]);
-// Check if class is a-z or 0-9
-if (!preg_match("/^[a-z0-9]*$/", $class_id)) header("Location: /classes");
-
 // Check login state
 require("../../res/php/session.php");
 start_session();
@@ -163,7 +157,6 @@
             <div id="task_mark_undone"><i class="fa-regular fa-circle-xmark"></i></div>
             <div id="task_delete"><i class="fa-solid fa-trash-can"></i></div>
         </div>
-        <div id="class_id" style="display: none;"><?= $class_id ?></div>
     </main>
     <script>
         var type = "<?= $task["type"] ?>";