tyler.durden/pandorafms
1
0
Fork 0
mirror of https://github.com/pandorafms/pandorafms.git synced 2025-07-31 01:35:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

2011-06-07 Javier Lanz <javier.lanz@artica.es>

Browse Source 
* operation/events/events_list.php: Added rawurlencode and io_safe_input
	where they were necessary


git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@4415 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
This commit is contained in:
javilanz 2011-06-07 16:37:51 +00:00
parent 7b82850813
commit a7fc24ba97
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pandora_console/ChangeLog
View File

@ -1,3 +1,8 @@
2011-06-07 Javier Lanz <javier.lanz@artica.es>
* operation/events/events_list.php: Added rawurlencode and io_safe_input
where they were necessary
2011-06-07 Junichi Satoh <junichi@rworks.jp> 2011-06-07 Junichi Satoh <junichi@rworks.jp>
* operation/agentes/datos_agente.php: Improved filter. It allows * operation/agentes/datos_agente.php: Improved filter. It allows

6
pandora_console/operation/events/events_list.php
View File

@ -98,7 +98,7 @@ switch($status) {
} }
if ($search != "") { if ($search != "") {
$sql_post .= " AND evento LIKE '%".base64_decode($search)."%'"; $sql_post .= " AND evento LIKE '%".io_safe_input($search)."%'";
} }
if ($event_type != "") { if ($event_type != "") {
@ -132,7 +132,7 @@ if ($event_view_hr > 0) {
} }
$url = "index.php?sec=eventos&amp;sec2=operation/events/events&amp;search=" . $url = "index.php?sec=eventos&amp;sec2=operation/events/events&amp;search=" .
$search . "&amp;event_type=" . $event_type . rawurlencode($search) . "&amp;event_type=" . $event_type .
"&amp;severity=" . $severity . "&amp;status=" . $status . "&amp;ev_group=" . "&amp;severity=" . $severity . "&amp;status=" . $status . "&amp;ev_group=" .
$ev_group . "&amp;refr=" . $config["refr"] . "&amp;id_agent=" . $ev_group . "&amp;refr=" . $config["refr"] . "&amp;id_agent=" .
$id_agent . "&amp;id_event=" . $id_event . "&amp;pagination=" . $id_agent . "&amp;id_event=" . $id_event . "&amp;pagination=" .
@ -407,7 +407,7 @@ foreach ($result as $event) {
// Event description // Event description
$data[1] = '<span title="'.$event["evento"].'" class="f9">'; $data[1] = '<span title="'.$event["evento"].'" class="f9">';
$data[1] .= '<a href="'.$url.'&amp;group_rep=0&amp;offset=0&amp;pure='.$config["pure"].'&amp;search='.base64_encode ($event["evento"]).'">'; $data[1] .= '<a href="'.$url.'&amp;group_rep=0&amp;offset=0&amp;pure='.$config["pure"].'&amp;search='.rawurlencode ($event["evento"]).'">';
if (strlen ($event["evento"]) > 50) { if (strlen ($event["evento"]) > 50) {
$data[1] .= mb_substr (io_safe_output($event["evento"]), 0, 50)."..."; $data[1] .= mb_substr (io_safe_output($event["evento"]), 0, 50)."...";
} }