Fixes in PHP scripts for XSS minor security issues.
git-svn-id: svn://192.168.202.10@3455 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
@@ -267,6 +267,9 @@ $question = preg_replace("/\'|\"|\\\\|;/","",$question);
|
||||
$answer = preg_replace("/\'|\"|\\\\|;/","",$answer);
|
||||
$status = preg_replace("/\'|\"|\\\\|;/","",$status);
|
||||
|
||||
$PHP_SELF=$_SERVER['PHP_SELF'];
|
||||
$PHP_SELF = preg_replace('/\.php.*/i','.php',$PHP_SELF);
|
||||
|
||||
#############################################
|
||||
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
|
||||
$VUselected_language = '';
|
||||
|
||||
Reference in New Issue
Block a user