From 101be15c9634bd0306c3db9d82b860ed5bfb3dae Mon Sep 17 00:00:00 2001
From: lopar <lopar.4ever@gmail.com>
Date: Fri, 2 Mar 2018 01:33:18 +0200
Subject: [PATCH] =?UTF-8?q?=D0=A7=D0=B0=D1=82=20=D0=BD=D0=B0=20=D0=BA?=
 =?UTF-8?q?=D0=BE=D0=BB=D0=B5=D0=BD=D0=BA=D0=B5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 buttons.php   | 4 ++--
 chat.php      | 3 ++-
 functions.php | 2 +-
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/buttons.php b/buttons.php
index 559a27f..cd1c951 100644
--- a/buttons.php
+++ b/buttons.php
@@ -8,8 +8,8 @@ include_once "functions.php";
 
 header("Cache-Control: no-cache");
 
-$header = filter_input(INPUT_GET, $_GET['header']);
-$ch = filter_input(INPUT_GET, $_GET['ch']);
+$header = filter_input(INPUT_GET, 'header');
+$ch = filter_input(INPUT_GET, 'ch');
 
 if ($header) {
     die();
diff --git a/chat.php b/chat.php
index c124aaf..8ad7f3c 100644
--- a/chat.php
+++ b/chat.php
@@ -18,7 +18,8 @@ while ($message = $chat->fetch_assoc()) {
     echo $message['msgdate'].": " . $message['msg'];
 }
 
-$msg = filter_input(INPUT_POST, $_POST['msg']);
+
+$msg = filter_input(INPUT_POST,'msg']);
 $uid = $_SESSION['uid'];
 
 if ($msg) db::c()->query('INSERT INTO `chat` (`cid`, `uid`, `msg`) VALUES (?i, ?i, "?s")', 1, $uid, $msg);
diff --git a/functions.php b/functions.php
index 79326c2..61659fc 100644
--- a/functions.php
+++ b/functions.php
@@ -72,7 +72,7 @@ if (empty($user['battle']) && ($user['hp'] < @$user['maxhp'])) {
     regenhp($user);
 }
 
-$inder = filter_input(INPUT_COOKIE, $_COOKIE['inder']);
+$inder = filter_input(INPUT_COOKIE, 'inder');
 
 if (!isset($banks['id'])) {
     $banks = db::c()->query('SELECT `id`, `cr`, `ekr` FROM `bank` WHERE `id` = "?s" AND `owner` = "?s" LIMIT 1', $inder, $u->i()['id'])->fetch_assoc();