(cp 0649ad3) fixes #1924 protect API user input from SQL injections

2026-07-04 17:02:17 +02:00 · 2023-05-29 12:26:51 +02:00
parent 7c1a1afc2d
commit 249bb6c932
4 changed files with 13 additions and 0 deletions
@@ -1091,6 +1091,8 @@ function ws_addDefaultMethods( $arr )
                              'type'=>WS_TYPE_INT|WS_TYPE_POSITIVE),
        'order' =>      array('default'=>'id',
                              'info'=>'id, username, level, email'),
+        'exclude' =>    array('flags'=>WS_PARAM_OPTIONAL|WS_PARAM_FORCE_ARRAY,
+                              'type'=>WS_TYPE_ID),
        'display' =>    array('default'=>'basics',
                              'info'=>'Comma saparated list (see method description)'),
        ),