admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security remove direct access to $_REQUEST

Browse source
This commit is contained in:
sparkyx 2020-11-12 18:00:55 +01:00
parent 8e4aa46543
commit 82efa19bd0
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
include/class/anc_print.class.php
View file

@ -62,19 +62,20 @@ class Anc_Print
*/
function get_request()
{
$http=new HttpInput();
if ( isset($_REQUEST['from']))
$this->from=$_REQUEST['from'];
$this->from=$http->request('from');
if ( isset($_REQUEST['to']))
$this->to=$_REQUEST['to'];
$this->to=$http->request('to');
if ( isset($_REQUEST['from_poste']))
$this->from_poste=$_REQUEST['from_poste'];
$this->from_poste=$http->request('from_poste');
if ( isset($_REQUEST['to_poste']))
$this->to_poste=$_REQUEST['to_poste'];
$this->to_poste=$http->request('to_poste');
if ( isset($_REQUEST['pa_id']))
$this->pa_id=$_REQUEST['pa_id'];
$this->pa_id=$http->request('pa_id');
else
$this->pa_id="";