iarv/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-03-28 17:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixes #573, check $_GET['tab'] against hacking attempt

Browse Source 
git cherry-pick 4b33a0fd19
This commit is contained in:
plegall
2017-01-01 19:04:18 +01:00
parent ec4cbb0464
commit 8596c7de90
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
admin/languages.php
View File

@@ -31,9 +31,14 @@ include_once(PHPWG_ROOT_PATH.'admin/include/tabsheet.class.php');
$my_base_url = get_root_url().'admin.php?page=languages';
if (isset($_GET['tab']))
{
check_input_parameter('tab', $_GET, false, '/^(installed|update|new)$/');
$page['tab'] = $_GET['tab'];
}
else
{
$page['tab'] = 'installed';
}
$tabsheet = new tabsheet();
$tabsheet->set_id('languages');