use base64 for delete_message.php

Author: simonLeary42

resources/templates/header.php

@@ -3,6 +3,7 @@
 use UnityWebPortal\lib\UnityHTTPD;
 
 if ($_SERVER["REQUEST_METHOD"] == "POST") {
+    $x = 5 / 0;
     // another page should have already validated and we can't validate the same token twice
     // UnityHTTPD::validatePostCSRFToken();
     if (
@@ -164,9 +165,9 @@
             htmlspecialchars($level->value),
             htmlspecialchars($title),
             htmlspecialchars($body),
-            htmlspecialchars($level->value),
-            htmlspecialchars($title),
-            htmlspecialchars($body),
+            base64_encode($level->value),
+            base64_encode($title),
+            base64_encode($body),
         );
     }
     if (

webroot/panel/ajax/delete_message.php

@@ -5,8 +5,8 @@
 use UnityWebPortal\lib\UnityHTTPD;
 use UnityWebPortal\lib\UnityHTTPDMessageLevel;
 
-$level_str = UnityHTTPD::getPostData("level");
+$level_str = base64_decode(UnityHTTPD::getPostData("level"));
 $level = UnityHTTPDMessageLevel::from($level_str);
-$title = UnityHTTPD::getPostData("title");
-$body = UnityHTTPD::getPostData("body");
+$title = base64_decode(UnityHTTPD::getPostData("title"));
+$body = base64_decode(UnityHTTPD::getPostData("body"));
 UnityHTTPD::deleteMessage($level, $title, $body);