tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-04-08 18:55:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Solved ajax sql injection

Browse Source
This commit is contained in:
Jose Gonzalez 2020-09-17 15:14:03 +02:00
parent 21b3a5ad2a
commit 1258a1a635
1 changed files with 3 additions and 2 deletions

5
pandora_console/general/cg_items.php

@ -1,4 +1,5 @@
<?php
$stacked = db_get_sql('select stacked from tgraph where id_graph = '.$_GET['data']);
$num_items = db_get_sql('select count(*) from tgraph_source where id_graph = '.$_GET['data']);
$data = (int) get_parameter('data');
$stacked = db_get_sql('select stacked from tgraph where id_graph = '.$data);
$num_items = db_get_sql('select count(*) from tgraph_source where id_graph = '.$data);
echo "$stacked,$num_items";