Changeset 6905

Timestamp:

09/13/10 22:52:20 (3 years ago)

Author:

plg

Message:

bug 1849 fixed: protect $_GET keys against SQL injections before parsing URL.

Files:

• branches/2.1/include/section_init.inc.php (modified) (1 diff)

branches/2.1/include/section_init.inc.php

@@ -62 +62 @@
     break;
   }
+  
+  // the $_GET keys are not protected in include/common.inc.php, only the values
+  $rewritten = pwg_db_real_escape_string($rewritten);
+  
   $page['root_path'] = PHPWG_ROOT_PATH;
 }