Harden CMS security and theme contrast

src/actions/admin-email-templates.ts

@@ -3,6 +3,7 @@
 import { revalidatePath } from "next/cache";
 import { requireStaff } from "@/lib/admin/guard";
 import { prisma } from "@/lib/prisma";
+import { formPositiveBigInt } from "@/lib/form-data";
 
 export async function createEmailTemplate(formData: FormData): Promise<void> {
   await requireStaff();
@@ -61,14 +62,8 @@ export async function updateEmailTemplate(formData: FormData): Promise<void> {
 
 export async function deleteEmailTemplate(formData: FormData): Promise<void> {
   await requireStaff();
-  const raw = String(formData.get("id") ?? "");
-  if (!raw) return;
-  let id: bigint;
-  try {
-    id = BigInt(raw);
-  } catch {
-    return;
-  }
+  const id = formPositiveBigInt(formData, "id");
+  if (!id) return;
   await prisma.emailTemplates.delete({ where: { id } });
   revalidatePath("/admin/email-templates");
 }