fixes #1012 prevent SQL injection with a check on user input

This commit is contained in:
plegall
2019-08-12 14:52:56 +02:00
parent 4932bc502b
commit fccb6caa75
+2
View File
@@ -125,6 +125,8 @@ if (isset($_POST['submitFilter']))
if (isset($_POST['filter_category_use']))
{
check_input_parameter('filter_category', $_POST, false, PATTERN_ID);
$_SESSION['bulk_manager_filter']['category'] = $_POST['filter_category'];
if (isset($_POST['filter_category_recursive']))