FIX CVE-2018-19993

This commit is contained in:
Laurent Destailleur 2018-12-22 16:59:30 +01:00
parent 0f06e39d23
commit fc3fcc5455

View File

@ -1,5 +1,5 @@
<?php <?php
/* Copyright (C) 2016 Laurent Destailleur <eldy@users.sourceforge.net> /* Copyright (C) 2016-2018 Laurent Destailleur <eldy@users.sourceforge.net>
* *
* This program is free software; you can redistribute it and/or modify * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by * it under the terms of the GNU General Public License as published by
@ -34,7 +34,7 @@ require '../main.inc.php';
* View * View
*/ */
if (! GETPOST('transkey') && ! GETPOST('transphrase')) if (! GETPOST('transkey','alphanohtml') && ! GETPOST('transphrase','alphanohtml'))
{ {
print 'Sorry, it seems your internet connexion is off.<br>'; print 'Sorry, it seems your internet connexion is off.<br>';
print 'You need to be connected to network to use this software.<br>'; print 'You need to be connected to network to use this software.<br>';
@ -44,7 +44,7 @@ else
$langs->load("error"); $langs->load("error");
$langs->load("other"); $langs->load("other");
if (GETPOST('transphrase')) print GETPOST('transphrase'); if (GETPOST('transphrase','alphanohtml')) print GETPOST('transphrase','alphanohtml');
if (GETPOST('transkey')) print $langs->trans(GETPOST('transkey')); if (GETPOST('transkey','alphanohtml')) print $langs->trans(GETPOST('transkey','alphanohtml'));
} }