From: <abe...@us...> - 2013-03-20 21:17:15
|
Revision: 6008 http://astlinux.svn.sourceforge.net/astlinux/?rev=6008&view=rev Author: abelbeck Date: 2013-03-20 21:17:08 +0000 (Wed, 20 Mar 2013) Log Message: ----------- web interface, sanitize text input by also ignoring the backslash character Modified Paths: -------------- branches/1.0/package/webinterface/altweb/common/functions.php Modified: branches/1.0/package/webinterface/altweb/common/functions.php =================================================================== --- branches/1.0/package/webinterface/altweb/common/functions.php 2013-03-20 19:07:28 UTC (rev 6007) +++ branches/1.0/package/webinterface/altweb/common/functions.php 2013-03-20 21:17:08 UTC (rev 6008) @@ -391,6 +391,7 @@ $str = str_replace('$', '', $str); $str = str_replace('`', '', $str); $str = str_replace('"', '', $str); + $str = str_replace('\\', '', $str); return($str); } @@ -411,6 +412,7 @@ $str = stripslashes($str); } $str = str_replace('"', '', $str); + $str = str_replace('\\', '', $str); $str = trim($str); return($str); } @@ -423,6 +425,7 @@ $str = stripslashes($str); } $str = str_replace('"', '', $str); + $str = str_replace('\\', '', $str); $str = trim($str); return($str); } This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |