blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-07-20 08:22:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Sicherheitslücken im LV-Plan behoben

Browse Source
This commit is contained in:
Andreas Österreicher
2009-12-18 12:43:56 +00:00
parent 197e1801d6
commit 8636d3ad7d
5 changed files with 187 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/functions.inc.php
+9 -1
View File
@@ -45,12 +45,20 @@ function crlf()
return $crlf;
}
function check_uid($uid)
{
if(ctype_alnum($uid) && mb_strlen($uid)<=32)
return true;
else
return false;
}
function check_lektor($uid)
{
$db = new basis_db();
// uid von View 'Lektor' holen
$sql_query="SELECT mitarbeiter_uid FROM public.tbl_mitarbeiter WHERE mitarbeiter_uid='$uid'";
$sql_query="SELECT mitarbeiter_uid FROM public.tbl_mitarbeiter WHERE mitarbeiter_uid='".addslashes($uid)."'";
//echo $sql_query;
if($db->db_query($sql_query))
{