aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--include/section_init.inc.php4
1 files changed, 4 insertions, 0 deletions
diff --git a/include/section_init.inc.php b/include/section_init.inc.php
index a4e10f806..38536ba90 100644
--- a/include/section_init.inc.php
+++ b/include/section_init.inc.php
@@ -61,6 +61,10 @@ else
$rewritten = $key;
break;
}
+
+ // the $_GET keys are not protected in include/common.inc.php, only the values
+ $rewritten = pwg_db_real_escape_string($rewritten);
+
$page['root_path'] = PHPWG_ROOT_PATH;
}