adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-07-21 00:53:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes GHSA-6wj3-7fhw-gfpm upgrade/install: make sure user input is sanitized

Browse Source
This commit is contained in:
plegall
2026-05-03 12:03:43 +02:00
parent 5277a7dee4
commit 2cfa7a3d19
2 changed files with 13 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/include/functions_upgrade.php
+1 -1
View File
@@ -212,7 +212,7 @@ SELECT status
$username = $_POST['username'];
$password = $_POST['password'];
if(function_exists('get_magic_quotes_gpc') && !@get_magic_quotes_gpc() )
if (!function_exists('get_magic_quotes_gpc') or !@get_magic_quotes_gpc())
{
$username = pwg_db_real_escape_string($username);
}