merge r13957 from branch 2.3 to trunk

bug 2611 fixed: check $_GET['section'] input parameter git-svn-id: http://piwigo.org/svn/trunk@13958 68402e56-0260-453c-a942-63ccdbb3a9ee
2026-07-21 00:53:04 +02:00 · 2012-04-07 21:02:56 +00:00
parent c59b052d7c
commit d2c7671d93
1 changed files with 3 additions and 0 deletions
@@ -36,6 +36,9 @@ include_once(PHPWG_ROOT_PATH.'admin/include/tabsheet.class.php');
 check_status(ACCESS_ADMINISTRATOR);

 //-------------------------------------------------------- sections definitions
+
+check_input_parameter('section', $_GET, false, '/^[a-z]+$/i');
+
 if (!isset($_GET['section']))
 {
  $page['section'] = 'main';