fixes #826, check input parameter order_by in configuration

This commit is contained in:
plegall
2017-12-18 17:06:37 +01:00
parent 9028c75c1f
commit 9671454e75
+2
View File
@@ -161,6 +161,8 @@ if (isset($_POST['submit']))
{ {
if ( !empty($_POST['order_by']) ) if ( !empty($_POST['order_by']) )
{ {
check_input_parameter('order_by', $_POST, true, '/^('.implode('|', array_keys($sort_fields)).')$/');
$used = array(); $used = array();
foreach ($_POST['order_by'] as $i => $val) foreach ($_POST['order_by'] as $i => $val)
{ {