From 18c51f80d148464c0d496172080c61c03d3814b9 Mon Sep 17 00:00:00 2001
From: frederik <frederik.slos@gmail.com>
Date: Fri, 26 Jan 2024 17:25:49 +0100
Subject: [PATCH] fix: un-escape quotes before writing to file

---
 homepage/views.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/homepage/views.php b/homepage/views.php
index 5a87e4b..17947ff 100644
--- a/homepage/views.php
+++ b/homepage/views.php
@@ -197,7 +197,7 @@ if(isset($_GET['view'])){
       file_put_contents("$file", "$str");
       if(isset($_GET['species'])){
         foreach ($_GET['species'] as $selectedOption)
-          file_put_contents("./scripts/include_species_list.txt", $selectedOption."\n", FILE_APPEND);
+          file_put_contents("./scripts/include_species_list.txt", htmlspecialchars_decode($selectedOption, ENT_QUOTES)."\n", FILE_APPEND);
       }
     } elseif(isset($_GET['species']) && isset($_GET['del'])){
       $file = './scripts/include_species_list.txt';
@@ -207,6 +207,7 @@ if(isset($_GET['view'])){
       foreach($_GET['species'] as $selectedOption) {
         $content = file_get_contents("../BirdNET-Pi/include_species_list.txt");
         $newcontent = str_replace($selectedOption, "", "$content");
+        $newcontent = str_replace(htmlspecialchars_decode($selectedOption, ENT_QUOTES), "", "$newcontent");
         file_put_contents("./scripts/include_species_list.txt", "$newcontent");
       }
       $file = './scripts/include_species_list.txt';
@@ -223,7 +224,7 @@ if(isset($_GET['view'])){
       $str = preg_replace("/(^[\r\n]*|[\r\n]+)[\s\t]*[\r\n]+/", "\n", $str);
       file_put_contents("$file", "$str");
       foreach ($_GET['species'] as $selectedOption)
-        file_put_contents("./scripts/exclude_species_list.txt", $selectedOption."\n", FILE_APPEND);
+        file_put_contents("./scripts/exclude_species_list.txt", htmlspecialchars_decode($selectedOption, ENT_QUOTES)."\n", FILE_APPEND);
     } elseif (isset($_GET['species']) && isset($_GET['del'])){
       $file = './scripts/exclude_species_list.txt';
       $str = file_get_contents("$file");
@@ -232,6 +233,7 @@ if(isset($_GET['view'])){
       foreach($_GET['species'] as $selectedOption) {
         $content = file_get_contents("./scripts/exclude_species_list.txt");
         $newcontent = str_replace($selectedOption, "", "$content");
+        $newcontent = str_replace(htmlspecialchars_decode($selectedOption, ENT_QUOTES), "", "$content");
         file_put_contents("./scripts/exclude_species_list.txt", "$newcontent");
       }
       $file = './scripts/exclude_species_list.txt';