archive/piwigo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

bug 1848 fixed: do not print methodName in header to avoid CRLF attack.

Browse source 
git-svn-id: http://piwigo.org/svn/branches/2.1@6890 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
plegall 2010-09-13 18:40:34 +00:00
parent e05f2b5e61
commit 25ca538c0c
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
include/ws_core.inc.php
View file

@ -477,7 +477,7 @@ Request format: ".@$this->_requestFormat." Response format: ".@$this->_responseF
if ( $method==null ) if ( $method==null )
{ {
return new PwgError(WS_ERR_INVALID_METHOD, 'Method name "'.$methodName.'" is not valid'); return new PwgError(WS_ERR_INVALID_METHOD, 'Method name is not valid');
} }
// parameter check and data coercion ! // parameter check and data coercion !