Security fixes in PHP scripts for non-latin setting systems
git-svn-id: svn://192.168.202.10@1123 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
@@ -22,10 +22,11 @@
|
||||
# 90428-0209 - Added blind_monitor function
|
||||
# 90508-0642 - Changed to PHP long tags
|
||||
# 90514-0602 - Added sounds_list function
|
||||
# 90522-0506 - Security fix
|
||||
#
|
||||
|
||||
$version = '2.2.0-8';
|
||||
$build = '90514-0602';
|
||||
$version = '2.2.0-9';
|
||||
$build = '90522-0506';
|
||||
|
||||
require("dbconnect.php");
|
||||
|
||||
@@ -192,6 +193,12 @@ if ($non_latin < 1)
|
||||
$server_ip = ereg_replace("[^\.0-9]","",$server_ip);
|
||||
$stage = ereg_replace("[^a-zA-Z]","",$stage);
|
||||
}
|
||||
else
|
||||
{
|
||||
$user = ereg_replace("'|\"|\\\\|;","",$user);
|
||||
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
|
||||
$source = ereg_replace("'|\"|\\\\|;","",$source);
|
||||
}
|
||||
|
||||
if (strlen($list_id)<1) {$list_id='999';}
|
||||
if (strlen($phone_code)<1) {$phone_code='1';}
|
||||
|
||||
Reference in New Issue
Block a user