adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-07 17:23:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

fixes #667, check $_GET['page'] to avoid XSS

Browse Source 
This can be an issue only on Internet Explorer
This commit is contained in:
plegall
2017-06-12 11:36:28 +02:00
parent 3ae62ce118
commit 4310fe7a55
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin.php
+2
View File
@@ -41,6 +41,8 @@ trigger_notify('loc_begin_admin');
check_status(ACCESS_ADMINISTRATOR); check_status(ACCESS_ADMINISTRATOR);
check_input_parameter('page', $_GET, false, '/^[a-zA-Z\d_-]+$/');
// +-----------------------------------------------------------------------+ // +-----------------------------------------------------------------------+
// | Direct actions | // | Direct actions |
// +-----------------------------------------------------------------------+ // +-----------------------------------------------------------------------+