fixed #1876 Added check_input_parameter for $_GET parameters

This commit is contained in:
MatthieuLP
2023-03-01 12:04:18 +01:00
parent e8b8813e58
commit 721384ffc4

View File

@@ -39,6 +39,10 @@ $display_thumbnails = array('no_display_thumbnail' => l10n('No display'),
check_status(ACCESS_ADMINISTRATOR);
check_input_parameter('filter_ip', $_GET, false, '/^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/');
check_input_parameter('filter_image_id', $_GET, false, '/^\d+$/');
check_input_parameter('filter_user_id', $_GET, false, '/^\d+$/');
// +-----------------------------------------------------------------------+
// | template init |
// +-----------------------------------------------------------------------+