diff options
author | plegall <plg@piwigo.org> | 2009-12-15 00:33:57 +0000 |
---|---|---|
committer | plegall <plg@piwigo.org> | 2009-12-15 00:33:57 +0000 |
commit | 742e2a7c0ac86e9bcce2fa6eef65214e869cd19c (patch) | |
tree | 39ece70263b1fb2ef881352f11e1f4a38b94afd7 /admin/element_set.php | |
parent | 8bbbe6c7943296a81df1c232ca7de0329295477f (diff) |
bug 1329 fixed: add a check_input_parameter function to prevent hacking
attempts.
git-svn-id: http://piwigo.org/svn/branches/2.0@4495 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'admin/element_set.php')
-rw-r--r-- | admin/element_set.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/admin/element_set.php b/admin/element_set.php index 821c4e188..bc722887b 100644 --- a/admin/element_set.php +++ b/admin/element_set.php @@ -39,6 +39,8 @@ include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); // +-----------------------------------------------------------------------+ check_status(ACCESS_ADMINISTRATOR); +check_input_parameter('selection', @$_POST['selection'], true, PATTERN_ID); + // +-----------------------------------------------------------------------+ // | caddie management | // +-----------------------------------------------------------------------+ |