From fccb6caa7585603a7c911456e0363ac510888960 Mon Sep 17 00:00:00 2001 From: plegall Date: Mon, 12 Aug 2019 14:52:56 +0200 Subject: [PATCH] fixes #1012 prevent SQL injection with a check on user input --- admin/batch_manager.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/admin/batch_manager.php b/admin/batch_manager.php index 739bb7777..e6c14b63c 100644 --- a/admin/batch_manager.php +++ b/admin/batch_manager.php @@ -125,6 +125,8 @@ if (isset($_POST['submitFilter'])) if (isset($_POST['filter_category_use'])) { + check_input_parameter('filter_category', $_POST, false, PATTERN_ID); + $_SESSION['bulk_manager_filter']['category'] = $_POST['filter_category']; if (isset($_POST['filter_category_recursive']))