tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-28 08:14:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Solved ajax sql injection

Browse Source
This commit is contained in:
Jose Gonzalez 2020-09-17 15:14:03 +02:00
parent 21b3a5ad2a
commit 1258a1a635
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pandora_console/general/cg_items.php
View File

@ -1,4 +1,5 @@
<?php <?php
$stacked = db_get_sql('select stacked from tgraph where id_graph = '.$_GET['data']); $data = (int) get_parameter('data');
$num_items = db_get_sql('select count(*) from tgraph_source where id_graph = '.$_GET['data']); $stacked = db_get_sql('select stacked from tgraph where id_graph = '.$data);
$num_items = db_get_sql('select count(*) from tgraph_source where id_graph = '.$data);
echo "$stacked,$num_items"; echo "$stacked,$num_items";