FIX security vulnerability reported by ADLab of Venustech

2017-12-21 13:32:16 +01:00
parent 62f895e2ec
commit 6a62e13960
60 changed files with 562 additions and 129 deletions
--- a/htdocs/modulebuilder/template/core/tpl/mytemplate.tpl.php
+++ b/htdocs/modulebuilder/template/core/tpl/mytemplate.tpl.php
@@ -23,5 +23,13 @@
 * Put detailed description here.
 */

+// Protection to avoid direct call of template
+if (empty($conf) || ! is_object($conf))
+{
+	print "Error, template page can't be called as URL";
+	exit;
+}
+
+
 /** Your code here. */
 echo "Hello world!";