admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security : direct injection

Browse source
This commit is contained in:
Dany De Bontridder 2018-05-31 23:04:59 +02:00
parent 5feb8f2e47
commit 05fd1bd099
6 changed files with 35 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

4
include/lib/http_input.class.php
View file

@ -108,7 +108,7 @@ class HttpInput
if (array_key_exists($p_name,$this->array) )
{
$this->check_type($p_name, $p_type);
return $this->array[$p_name];
return strip_tags($this->array[$p_name]);
}
else
{
@ -121,7 +121,7 @@ class HttpInput
EXC_PARAM_VALUE);
}
$this->check_type($p_name, $p_type);
return $this->array[$p_name];
return strip_tags($this->array[$p_name]);
}
catch (Exception $e)
{