diff options
| author | rvelices <rv-github@modusoptimus.com> | 2008-08-23 01:15:33 +0000 |
|---|---|---|
| committer | rvelices <rv-github@modusoptimus.com> | 2008-08-23 01:15:33 +0000 |
| commit | 7550df3915d7e9c83c430ff3067dd73264e7866d (patch) | |
| tree | b731c7d687890f48ca6c525e33b17345e9c3d0f8 /upload.php | |
| parent | f645fc14190614fe6b86b509b8f5a3b0a68ad90e (diff) | |
- security fix : when conf['question_mark_in_urls']=true , $_SERVER['PATH_INFO'] was not sanitized against sql injection
- mysql errors are now dumped using trigger_error instead of echo and die -> allow admins to see later on if someone tries funny stuff
git-svn-id: http://piwigo.org/svn/branches/branch-1_7@2483 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'upload.php')
0 files changed, 0 insertions, 0 deletions