Changeset 1933 for trunk/preferences

Timestamp:

01/13/10 16:48:44 (14 years ago)

Author:

rafaelraymundo

Message:

Ticket #000 - Corrigido erro de vulnerabilidade encontrado na aplicacao...

File:

• trunk/preferences/preferences.php (modified) (1 diff)

trunk/preferences/preferences.php

@@ -15 +15 @@
                 'noappheader'             => True,
                 'nonavbar'                => True,
-                'currentapp'              => @$_GET['appname'] ? $_GET['appname'] : 'preferences',
+                'currentapp'              => @addslashes($_GET['appname']) ? addslashes($_GET['appname']) : 'preferences',
                 'enable_nextmatchs_class' => True
         );