parent
ef0e6956b3
commit
212b3bd60e
@ -194,6 +194,7 @@ function GETPOST($paramname,$check='',$method=0)
|
||||
// '../' is dangerous because it allows dir transversals
|
||||
if (preg_match('/"/',$out)) $out='';
|
||||
else if (preg_match('/\.\.\//',$out)) $out='';
|
||||
else if (preg_match('/(\s)*|(%20)*/',$out)) $out='';
|
||||
}
|
||||
elseif ($check == 'special')
|
||||
{
|
||||
|
||||
Loading…
Reference in New Issue
Block a user