From e309cfdc8ac33d01efb7bc16e4a69e6f32065e8d Mon Sep 17 00:00:00 2001
From: plegall <plg@piwigo.org>
Date: Wed, 4 Jan 2017 14:12:36 +0100
Subject: [PATCH] bug #602, less strict check on section url parameter

git cherry-pick f93a312e085e68301a0c2a6fc709216645764920
---
 admin/plugin.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin/plugin.php b/admin/plugin.php
index 704c3ad5e..196d5bd4e 100644
--- a/admin/plugin.php
+++ b/admin/plugin.php
@@ -39,7 +39,7 @@ for ($i=0; $i<count($sections); $i++)
     continue;
   }
 
-  if ($sections[$i] == '..' or !preg_match('/^[a-zA-Z_\.-]+$/', $sections[$i]))
+  if ($sections[$i] == '..' or !preg_match('/^[a-zA-Z0-9_\.-]+$/', $sections[$i]))
   {
     die('invalid section token ['.htmlentities($sections[$i]).']');
   }