Fixed unfilter variables issue #1015

git-svn-id: svn://192.168.202.10@2758 3d104415-ff17-0410-8863-d5cf3c621b8a
2017-05-27 00:50:43 +00:00
parent 158ae9ccb5
commit c0efa33ed1
1 changed files with 3 additions and 0 deletions
@@ -14,6 +14,7 @@
 # 130901-0832 - Changed to mysqli PHP functions
 # 141007-2147 - Finalized adding QXZ translation to all admin files
 # 170217-1213 - Fixed non-latin auth issue #995
+# 170526-2044 - Fixed unfilter variables issue #1015
 #

 if (isset($_GET["dcampaign"]))					{$dcampaign=$_GET["dcampaign"];}
@@ -64,6 +65,8 @@ else
 	$PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER);
 	}
 $dcampaign = preg_replace('/[^0-9a-zA-Z]/', '', $dcampaign);
+$list_ids = preg_replace('/[^\,0-9a-zA-Z]/', '', $list_ids);
+$forc = preg_replace('/[^0-9a-zA-Z]/', '', $forc);

 $auth=0;
 $reports_auth=0;