From 4a4fc8ccb7edd2caabf9fdba8d4f571e25b128a3 Mon Sep 17 00:00:00 2001 From: plegall Date: Sat, 7 Apr 2012 21:02:24 +0000 Subject: bug 2611 fixed: check $_GET['section'] input parameter git-svn-id: http://piwigo.org/svn/branches/2.3@13957 68402e56-0260-453c-a942-63ccdbb3a9ee --- admin/configuration.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/admin/configuration.php b/admin/configuration.php index 8488aa489..8f051ba2c 100644 --- a/admin/configuration.php +++ b/admin/configuration.php @@ -35,6 +35,9 @@ include_once(PHPWG_ROOT_PATH.'admin/include/tabsheet.class.php'); check_status(ACCESS_ADMINISTRATOR); //-------------------------------------------------------- sections definitions + +check_input_parameter('section', $_GET, false, '/^[a-z]+$/i'); + if (!isset($_GET['section'])) { $page['section'] = 'main'; -- cgit v1.2.3