From c44b6eabdd3c729c3490bbce1263ced9135aa288 Mon Sep 17 00:00:00 2001
From: Josh Pruim <josh@josh-M11x-R2.(none)>
Date: Sat, 1 Dec 2012 21:48:47 -0800
Subject: [PATCH] Added sanitization to API logic

---
 src/node/db/API.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/node/db/API.js b/src/node/db/API.js
index 4979e8c65..8317cb915 100644
--- a/src/node/db/API.js
+++ b/src/node/db/API.js
@@ -331,12 +331,12 @@ exports.createPad = function(padID, text, callback)
     callback(new customError("createPad can't create group pads","apierror"));
     return;
   }
-  
+  padID = padID.replace(/[^a-z0-9_\-]/gi, '_'); 
   //create pad
   getPadSafe(padID, false, text, function(err)
   {
     if(ERR(err, callback)) return;
-    callback();
+    callback(null, {padID: padID});
   });
 }