Wavyzz/dolibarr
2
0
Fork 1
mirror of https://github.com/Dolibarr/dolibarr.git synced 2025-12-06 09:38:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

Revert "Fix: sql injection"

Browse Source 
This reverts commit 8c3158cf28.
This commit is contained in:
Laurent Destailleur
2012-04-10 01:03:54 +02:00
parent 212b3bd60e
commit 4cb6ec76ee
2 changed files with 1 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
htdocs/core/lib/functions.lib.php
View File

@@ -194,12 +194,6 @@ function GETPOST($paramname,$check='',$method=0)
// '../' is dangerous because it allows dir transversals
if (preg_match('/"/',$out)) $out='';
else if (preg_match('/\.\.\//',$out)) $out='';
else if (preg_match('/(\s)*|(%20)*/',$out)) $out='';
}
elseif ($check == 'special')
{
$out=trim($out);
if (preg_match('/(\s)*|(%20)*/',$out)) $out='';
}
elseif ($check == 'array')
{