Harden CMS security and theme contrast

src/actions/admin-help.ts

@@ -5,6 +5,7 @@ import { redirect } from "next/navigation";
 import { requireStaff } from "@/lib/admin/guard";
 import { prisma } from "@/lib/prisma";
 import { logStaffActivity } from "@/lib/services/staff-activity";
+import { formPositiveBigInt } from "@/lib/form-data";
 
 // CRUD for help-center FAQ entries (website_help_center_categories). Each entry
 // is a titled content block with an optional image and call-to-action button.
@@ -72,9 +73,8 @@ export async function createHelpQuestion(formData: FormData): Promise<void> {
 
 export async function updateHelpQuestion(formData: FormData): Promise<void> {
   const staff = await requireStaff();
-  const raw = String(formData.get("id") ?? "");
-  if (!/^\d+$/.test(raw)) return;
-  const id = BigInt(raw);
+  const id = formPositiveBigInt(formData, "id");
+  if (!id) return;
 
   const name = String(formData.get("name") ?? "")
     .trim()
@@ -132,9 +132,8 @@ export async function updateHelpQuestion(formData: FormData): Promise<void> {
 
 export async function deleteHelpQuestion(formData: FormData): Promise<void> {
   const staff = await requireStaff();
-  const raw = String(formData.get("id") ?? "");
-  if (!/^\d+$/.test(raw)) return;
-  const id = BigInt(raw);
+  const id = formPositiveBigInt(formData, "id");
+  if (!id) return;
 
   try {
     await prisma.websiteHelpCenterCategories.delete({ where: { id } });