From 742e2a7c0ac86e9bcce2fa6eef65214e869cd19c Mon Sep 17 00:00:00 2001 From: plegall Date: Tue, 15 Dec 2009 00:33:57 +0000 Subject: bug 1329 fixed: add a check_input_parameter function to prevent hacking attempts. git-svn-id: http://piwigo.org/svn/branches/2.0@4495 68402e56-0260-453c-a942-63ccdbb3a9ee --- admin/cat_list.php | 2 ++ 1 file changed, 2 insertions(+) (limited to 'admin/cat_list.php') diff --git a/admin/cat_list.php b/admin/cat_list.php index 3a9a1fc46..43403e4f9 100644 --- a/admin/cat_list.php +++ b/admin/cat_list.php @@ -64,6 +64,8 @@ function save_categories_order($categories) // | initialization | // +-----------------------------------------------------------------------+ +check_input_parameter('parent_id', @$_GET['parent_id'], false, PATTERN_ID); + $categories = array(); $base_url = get_root_url().'admin.php?page=cat_list'; -- cgit v1.2.3