mirror of
https://github.com/e107inc/e107.git
synced 2025-08-01 20:30:39 +02:00
Sanitize some request variables
This commit is contained in:
@@ -35,6 +35,16 @@ $e_sub_cat = 'database';
|
||||
$frm = e107::getForm();
|
||||
$mes = e107::getMessage();
|
||||
|
||||
if(isset($_GET['mode']))
|
||||
{
|
||||
$_GET['mode'] = preg_match('/[^\w-]/', '', $_GET['mode']);
|
||||
}
|
||||
|
||||
if(isset($_GET['type']))
|
||||
{
|
||||
$_GET['type'] = preg_replace('/[^\w-]/', '', $_GET['type']);
|
||||
}
|
||||
|
||||
/*
|
||||
* Execute trigger
|
||||
*/
|
||||
|
Reference in New Issue
Block a user