mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-06-02 04:15:05 +02:00
fixes #572, check $_GET['mode'] against hacking attempt
This commit is contained in:
@@ -593,6 +593,7 @@ $manager_link = get_root_url().'admin.php?page=batch_manager&mode=';
|
||||
|
||||
if (isset($_GET['mode']))
|
||||
{
|
||||
check_input_parameter('mode', $_GET, false, '/^(global|unit)$/');
|
||||
$page['tab'] = $_GET['mode'];
|
||||
}
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user