forked from Wavyzz/dolibarr
Fix: add special test
This commit is contained in:
@@ -194,7 +194,6 @@ function GETPOST($paramname,$check='',$method=0)
|
|||||||
// '../' is dangerous because it allows dir transversals
|
// '../' is dangerous because it allows dir transversals
|
||||||
if (preg_match('/"/',$out)) $out='';
|
if (preg_match('/"/',$out)) $out='';
|
||||||
else if (preg_match('/\.\.\//',$out)) $out='';
|
else if (preg_match('/\.\.\//',$out)) $out='';
|
||||||
else if (preg_match('/(\s)*|(%20)*/',$out)) $out='';
|
|
||||||
}
|
}
|
||||||
elseif ($check == 'special')
|
elseif ($check == 'special')
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user