Merge branch 'ent-6741-Vulnerabilidad-SQL-injection' into 'develop'

Fix vulnerability

Closes pandora_enterprise#6741

See merge request artica/pandorafms!3622
This commit is contained in:
Daniel Rodriguez 2020-11-26 18:07:20 +01:00
commit d08e60f13a
1 changed files with 6 additions and 0 deletions

View File

@ -336,6 +336,12 @@ class HostDevices extends Wizard
)
)
);
// Forbidden chars cleaning.
foreach ($network as $key => $singleNetwork) {
$network[$key] = preg_replace('/[-()\']/', '', $singleNetwork);
}
unlink($_FILES['network_csv']['tmp_name']);
if (empty($network) || is_array($network) === false) {
$this->msg = __(