blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-07-23 01:42:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Diverse Sicherheitslücken geschlossen

Browse Source
This commit is contained in:
Andreas Österreicher
2018-03-08 09:26:34 +01:00
parent f0f29be54b
commit 4444da13d9
3 changed files with 158 additions and 137 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cis/testtool/admin/index.php
+6 -3
View File
@@ -278,7 +278,7 @@ if (isset($_POST['deletePicture']) || isset($_POST['deleteAudio']))
{
if (!$rechte->isBerechtigt('basis/testtool', null, 'suid'))
die($rechte->errormsg);
$frage = new frage();
if ($frage->load($_GET['frage_id']))
{
@@ -651,11 +651,14 @@ foreach ($studiengang->result as $row)
echo '</select>';
//Liste der Gebiete
$qry = "SELECT * FROM testtool.tbl_ablauf WHERE studiengang_kz=".$stg_kz."";
$qry = "SELECT * FROM testtool.tbl_ablauf WHERE studiengang_kz=".$db->db_add_param($stg_kz);
$anzahl = $db->db_num_rows($db->db_query($qry));
if ($stg_kz !== "-1" && $anzahl !== 0)
$qry = "SELECT * FROM testtool.tbl_gebiet LEFT JOIN testtool.tbl_ablauf USING (gebiet_id) WHERE studiengang_kz=".$stg_kz." ORDER BY semester,reihung";
{
$qry = "SELECT * FROM testtool.tbl_gebiet LEFT JOIN testtool.tbl_ablauf USING (gebiet_id)
WHERE studiengang_kz=".$db->db_add_param($stg_kz)." ORDER BY semester,reihung";
}
else
$qry = "SELECT * FROM testtool.tbl_gebiet ORDER BY bezeichnung";