admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security : direct injection

Browse source
This commit is contained in:
Dany De Bontridder 2018-05-31 23:04:59 +02:00
parent f96180c157
commit fd6886835c
6 changed files with 35 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/lib/html_input.class.php
View file

@ -221,7 +221,7 @@ class HtmlInput
{
if ($p_id=="")
$p_id=$p_name;
return '<INPUT TYPE="hidden" id="'.$p_id.'" NAME="'.$p_name.'" VALUE="'.$p_value.'">';
return '<INPUT TYPE="hidden" id="'.strip_tags($p_id).'" NAME="'.$p_name.'" VALUE="'.strip_tags($p_value).'">';
}
static function extension()