Security : direct injection

This commit is contained in:
Dany De Bontridder 2018-05-31 23:04:59 +02:00
parent 5feb8f2e47
commit 05fd1bd099
6 changed files with 35 additions and 41 deletions

View file

@ -263,7 +263,7 @@ if (isset($_REQUEST['ac']))
}
$_REQUEST['ac']= trim(strtoupper($_REQUEST['ac']));
$AC=$_REQUEST['ac'];
$AC=$http->request('ac');
$user_profile=$g_user->get_profile();