Sanitize data

This commit is contained in:
Laurent Destailleur 2020-12-27 20:49:40 +01:00
parent a6cd34739e
commit 6b03a2d264

View File

@ -73,7 +73,7 @@ if (!$section) {
dol_print_error('', 'Error, section parameter missing'); dol_print_error('', 'Error, section parameter missing');
exit; exit;
} }
$urlfile = GETPOST("urlfile"); $urlfile = (string) dol_sanitizePathName(GETPOST("urlfile"));
if (!$urlfile) { if (!$urlfile) {
dol_print_error('', "ErrorParamNotDefined"); dol_print_error('', "ErrorParamNotDefined");
exit; exit;