bug 1391 fixed: prevent from SQL injection

git-svn-id: http://piwigo.org/svn/branches/2.0@4742 68402e56-0260-453c-a942-63ccdbb3a9ee
2026-08-07 09:13:02 +02:00 · 2010-01-25 15:18:49 +00:00
parent f7470e555d
commit fb21d51aa2
1 changed files with 2 additions and 0 deletions
@@ -63,6 +63,8 @@ function ts_to_iso8601($ts)
 // |                            initialization                             |
 // +-----------------------------------------------------------------------+

+check_input_parameter('feed', $_GET['feed'], false, '/^[0-9a-z]{50}$/i');
+
 $feed_id= isset($_GET['feed']) ? $_GET['feed'] : '';
 $image_only=isset($_GET['image_only']);