aboutsummaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
Diffstat (limited to 'include')
-rw-r--r--include/functions_category.inc.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/include/functions_category.inc.php b/include/functions_category.inc.php
index 0dfb2a7a3..ad118a905 100644
--- a/include/functions_category.inc.php
+++ b/include/functions_category.inc.php
@@ -381,6 +381,12 @@ function initialize_category( $calling_page = 'category' )
// search result
if ( $page['cat'] == 'search' )
{
+ // SQL injection hacking attempt?
+ if (strpos($_GET['search'], ';') !== false)
+ {
+ die('Hacking attempt on "search" GET parameter');
+ }
+
// analyze search string given in URL (created in search.php)
$tokens = explode('|', $_GET['search']);