lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

A better way to block injections

Browse Source
This commit is contained in:
Laurent Destailleur 2011-03-07 23:15:44 +00:00
parent ecee1ec547
commit 7bd03b3b98
1 changed files with 5 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
htdocs/main.inc.php
View File

@ -87,23 +87,15 @@ function analyse_sql_and_script(&$var,$get)
{
foreach ($var as $key => $value)
{
/*if (test_sql_and_script_inject($key,$get) > 0) // We do not check key, only values
if (analyse_sql_and_script($value,$get))
{
$var[$key] = $value;
}
else
{
print 'Access refused by SQL/Script injection protection in main.inc.php';
exit;
}
else
{*/
if (analyse_sql_and_script($value,$get))
{
$var[$key] = $value;
}
else
{
print 'Access refused by SQL/Script injection protection in main.inc.php';
exit;
}
/*}*/
}
return true;
}