Changeset 30866 for branches/2.6/include/functions.inc.php

Timestamp:

Jan 8, 2015, 2:11:03 PM (9 years ago)

Author:

plg

Message:

merge r30864 from trunk to branch 2.6

bug 3186: improved security on search.php

File:

• branches/2.6/include/functions.inc.php (modified) (1 diff)

branches/2.6/include/functions.inc.php

@@ -1888 +1888 @@
     }
 
-    foreach ($param_value as $item_to_check)
-    {
-      if (!preg_match($pattern, $item_to_check))
+    foreach ($param_value as $key => $item_to_check)
+    {
+      if (!preg_match(PATTERN_ID, $key) or !preg_match($pattern, $item_to_check))
       {
         fatal_error('[Hacking attempt] an item is not valid in input parameter "'.$param_name.'"');