adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-08-07 01:03:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

issue #1150 also protect groupe name on API methods

Browse Source
This commit is contained in:
plegall
2020-02-07 17:17:17 +01:00
parent 619849ff8b
commit 6ac6db0d2d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/ws_functions/pwg.groups.php
+2 -2
View File
@@ -61,7 +61,7 @@ SELECT
*/ */
function ws_groups_add($params, &$service) function ws_groups_add($params, &$service)
{ {
$params['name'] = pwg_db_real_escape_string($params['name']); $params['name'] = pwg_db_real_escape_string(strip_tags(stripslashes($params['name'])));
// is the name not already used ? // is the name not already used ?
$query = ' $query = '
@@ -180,7 +180,7 @@ SELECT COUNT(*)
if (!empty($params['name'])) if (!empty($params['name']))
{ {
$params['name'] = pwg_db_real_escape_string($params['name']); $params['name'] = pwg_db_real_escape_string(strip_tags(stripslashes($params['name'])));
// is the name not already used ? // is the name not already used ?
$query = ' $query = '