Sanitize data

This commit is contained in:
Laurent Destailleur 2020-12-27 20:49:40 +01:00
parent a6cd34739e
commit 6b03a2d264

View File

@ -73,7 +73,7 @@ if (!$section) {
dol_print_error('', 'Error, section parameter missing');
exit;
}
$urlfile = GETPOST("urlfile");
$urlfile = (string) dol_sanitizePathName(GETPOST("urlfile"));
if (!$urlfile) {
dol_print_error('', "ErrorParamNotDefined");
exit;