Fix: #9032 Vulnerability

This commit is contained in:
Regis Houssin 2018-06-29 18:18:10 +02:00
parent dab264c641
commit 41709f07d0

View File

@ -47,16 +47,16 @@ $main_data_dir = GETPOST('main_data_dir') ? GETPOST('main_data_dir') : $main_dir
// Dolibarr root URL
$main_url = GETPOST('main_url');
// Database login informations
$userroot=GETPOST('db_user_root');
$passroot=GETPOST('db_pass_root');
$userroot=GETPOST('db_user_root','aZ09');
$passroot=GETPOST('db_pass_root'); // FIXME protect for injection
// Database server
$db_type=GETPOST('db_type','alpha');
$db_host=GETPOST('db_host','alpha');
$db_name=GETPOST('db_name','alpha');
$db_user=GETPOST('db_user','alpha');
$db_pass=GETPOST('db_pass');
$db_type=GETPOST('db_type','aZ09');
$db_host=GETPOST('db_host','aZ09');
$db_name=GETPOST('db_name','aZ09');
$db_user=GETPOST('db_user','aZ09');
$db_pass=GETPOST('db_pass'); // FIXME protect for injection
$db_port=GETPOST('db_port','int');
$db_prefix=GETPOST('db_prefix','alpha');
$db_prefix=GETPOST('db_prefix','aZ09');
$db_create_database = GETPOST('db_create_database','none');
$db_create_user = GETPOST('db_create_user','none');
// Force https