Changeset 30950

Timestamp:

Feb 12, 2015, 3:32:33 PM (9 years ago)

Author:

plg

Message:

bug 3201 fixed: check plugin identifier

File:

• trunk/admin/plugin.php (modified) (1 diff)

trunk/admin/plugin.php

@@ -46 +46 @@
 
 $plugin_id = $sections[0];
+
+if (!preg_match('/^\w+$/', $plugin_id))
+{
+  die('Invalid plugin identifier');
+}
+
 if ( !isset($pwg_loaded_plugins[$plugin_id]) )
 {