tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

2010-12-23 Miguel de Dios <miguel.dedios@artica.es> 

* include/functions.php: in function "check_sql" added some changes in
	the regular expression for pass the pandora field "delete_pending".



git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@3702 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
mdtrooper 2010-12-23 15:59:41 +00:00
parent 1902cb0cd7
commit 6dec3b09f2
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pandora_console/ChangeLog
View File

@ -1,3 +1,8 @@
2010-12-23 Miguel de Dios <miguel.dedios@artica.es>
* include/functions.php: in function "check_sql" added some changes in
the regular expression for pass the pandora field "delete_pending".
2010-12-23 Miguel de Dios <miguel.dedios@artica.es>
* include/ajax/reporting.ajax.php: fixed copy&paste mistake.

4
pandora_console/include/functions.php
View File

@ -1175,7 +1175,9 @@ function string2image($string, $width, $height, $fontsize = 3,
function check_sql ($sql){
// We remove "*" to avoid things like SELECT * FROM tusuario
if (preg_match("/\*|delete|drop|alter|modify|union|password|pass|insert|update/i", $sql)){
//Check that it not delete_ as "delete_pending" (this is a common field in pandora tables).
if (preg_match("/\*|delete[^_]|drop|alter|modify|union|password|pass|insert|update/i", $sql)) {
return "";
}
return $sql;