Catch escape in currencies

This commit is contained in:
James Cole
2023-02-17 05:49:54 +01:00
parent e4fa385ac5
commit 0667ccfc98
2 changed files with 11 additions and 6 deletions

View File

@@ -41,6 +41,11 @@ class TransactionCurrencyFactory
*/
public function create(array $data): TransactionCurrency
{
$data['code'] = e($data['code']);
$data['symbol'] = e($data['symbol']);
$data['name'] = e($data['name']);
$data['decimal_places'] = (int)$data['decimal_places'];
$data['enabled'] = (bool)$data['enabled'];
// if the code already exists (deleted)
// force delete it and then create the transaction:
$count = TransactionCurrency::withTrashed()->whereCode($data['code'])->count();
@@ -78,7 +83,7 @@ class TransactionCurrencyFactory
*/
public function find(?int $currencyId, ?string $currencyCode): ?TransactionCurrency
{
$currencyCode = (string)$currencyCode;
$currencyCode = (string)e($currencyCode);
$currencyId = (int)$currencyId;
if ('' === $currencyCode && 0 === $currencyId) {