bug 1329 fixed: add a check_input_parameter function to prevent hacking

attempts. git-svn-id: http://piwigo.org/svn/branches/2.0@4495 68402e56-0260-453c-a942-63ccdbb3a9ee
2026-08-06 16:53:34 +02:00 · 2009-12-15 00:33:57 +00:00
parent 8bbbe6c794
commit 742e2a7c0a
6 changed files with 59 additions and 0 deletions
@@ -64,6 +64,8 @@ function save_categories_order($categories)
 // |                            initialization                             |
 // +-----------------------------------------------------------------------+

+check_input_parameter('parent_id', @$_GET['parent_id'], false, PATTERN_ID);
+
 $categories = array();

 $base_url = get_root_url().'admin.php?page=cat_list';