Added PHP input form variable filters

git-svn-id: svn://192.168.202.10@3566 3d104415-ff17-0410-8863-d5cf3c621b8a
2022-02-18 06:09:51 +00:00
parent ca414e4e48
commit 55c9bc35dc
158 changed files with 297 additions and 14 deletions
@@ -48,6 +48,8 @@ if (isset($_GET["buffer"]))				{$buffer=$_GET["buffer"];}
 if (isset($_GET["DB"]))				{$DB=$_GET["DB"];}
 	elseif (isset($_POST["DB"]))	{$DB=$_POST["DB"];}

+$DB=preg_replace("/[^0-9a-zA-Z]/","",$DB);
+
 #############################################
 ##### START SYSTEM_SETTINGS LOOKUP #####
 $stmt = "SELECT use_non_latin,admin_web_directory,custom_fields_enabled,webroot_writable,enable_languages,language_method FROM system_settings;";