mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-07-06 01:42:29 +02:00
fixes #826, check input parameter order_by in configuration
This commit is contained in:
@@ -161,6 +161,8 @@ if (isset($_POST['submit']))
|
|||||||
{
|
{
|
||||||
if ( !empty($_POST['order_by']) )
|
if ( !empty($_POST['order_by']) )
|
||||||
{
|
{
|
||||||
|
check_input_parameter('order_by', $_POST, true, '/^('.implode('|', array_keys($sort_fields)).')$/');
|
||||||
|
|
||||||
$used = array();
|
$used = array();
|
||||||
foreach ($_POST['order_by'] as $i => $val)
|
foreach ($_POST['order_by'] as $i => $val)
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user