Security : direct injection
This commit is contained in:
parent
5feb8f2e47
commit
05fd1bd099
6 changed files with 35 additions and 41 deletions
|
|
@ -263,7 +263,7 @@ if (isset($_REQUEST['ac']))
|
|||
}
|
||||
|
||||
$_REQUEST['ac']= trim(strtoupper($_REQUEST['ac']));
|
||||
$AC=$_REQUEST['ac'];
|
||||
$AC=$http->request('ac');
|
||||
$user_profile=$g_user->get_profile();
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue