mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-07-21 17:13:42 +02:00
fixes #1012 prevent SQL injection with a check on user input
This commit is contained in:
@@ -125,6 +125,8 @@ if (isset($_POST['submitFilter']))
|
||||
|
||||
if (isset($_POST['filter_category_use']))
|
||||
{
|
||||
check_input_parameter('filter_category', $_POST, false, PATTERN_ID);
|
||||
|
||||
$_SESSION['bulk_manager_filter']['category'] = $_POST['filter_category'];
|
||||
|
||||
if (isset($_POST['filter_category_recursive']))
|
||||
|
||||
Reference in New Issue
Block a user