Changeset 4743

Timestamp:

Jan 25, 2010, 4:19:17 PM (14 years ago)

Author:

plg

Message:

merge r4742 from branch 2.0 to trunk

bug 1391 fixed: prevent from SQL injection

File:

• trunk/feed.php (modified) (1 diff)

trunk/feed.php

@@ -64 +64 @@
 // +-----------------------------------------------------------------------+
 
+check_input_parameter('feed', $_GET['feed'], false, '/^[0-9a-z]{50}$/i');
+
 $feed_id= isset($_GET['feed']) ? $_GET['feed'] : '';
 $image_only=isset($_GET['image_only']);