(cp 9671454) fixes #826, check input parameter order_by in configuration

This commit is contained in:
plegall
2017-12-18 17:09:56 +01:00
parent f7c8e0a947
commit 91ef7909a5

View File

@@ -161,6 +161,8 @@ if (isset($_POST['submit']))
{
if ( !empty($_POST['order_by']) )
{
check_input_parameter('order_by', $_POST, true, '/^('.implode('|', array_keys($sort_fields)).')$/');
$used = array();
foreach ($_POST['order_by'] as $i => $val)
{