From 2e1ab72a212d86083376e4ede9402253e038991c Mon Sep 17 00:00:00 2001 From: fbsanchez Date: Wed, 24 Jan 2018 17:28:00 +0100 Subject: [PATCH] Reapplied #1000 solution --- pandora_console/include/functions.php | 2 +- pandora_console/include/functions_reporting.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pandora_console/include/functions.php b/pandora_console/include/functions.php index 3caa79ad05..650baea762 100644 --- a/pandora_console/include/functions.php +++ b/pandora_console/include/functions.php @@ -1714,7 +1714,7 @@ function check_sql ($sql) { //Check that it not delete_ as "delete_pending" (this is a common field in pandora tables). - if (preg_match("/\*|delete[^_]|drop|alter|modify|union|password|pass|insert|update/i", $sql)) { + if (preg_match("/\*|delete[^_]|drop|alter|modify|password|pass|insert|update/i", $sql)) { return ""; } return $sql; diff --git a/pandora_console/include/functions_reporting.php b/pandora_console/include/functions_reporting.php index edb404980d..d981be97e7 100755 --- a/pandora_console/include/functions_reporting.php +++ b/pandora_console/include/functions_reporting.php @@ -4492,7 +4492,7 @@ function reporting_sql($report, $content) { } else { $return['correct'] = 0; - $return['error'] = __('Illegal query: Due security restrictions, there are some tokens or words you cannot use: *, delete, drop, alter, modify, union, password, pass, insert or update.'); + $return['error'] = __('Illegal query: Due security restrictions, there are some tokens or words you cannot use: *, delete, drop, alter, modify, password, pass, insert or update.'); } if ($config['metaconsole']) {