mirror of
https://github.com/FH-Complete/FHC-Core.git
synced 2026-07-25 08:34:29 +00:00
Diverse SQL-Injection Lücken geschlossen
This commit is contained in:
@@ -86,6 +86,14 @@ function resize($filename, $width, $height)
|
||||
if(!isset($_GET['person_id']))
|
||||
die($p->t('global/fehlerBeiDerParameteruebergabe'));
|
||||
|
||||
$person = new person();
|
||||
if(isset($_SESSION['prestudent/user']))
|
||||
$person_id=$person->checkZugangscode($_SESSION['prestudent/user']);
|
||||
if(isset($_SESSION['incoming/user']))
|
||||
$person_id=$person->checkZugangscode($_SESSION['prestudent/user']);
|
||||
if($person_id!=$_GET['person_id'])
|
||||
die('Sie haben keine Berechtigung für diese Seite');
|
||||
|
||||
//Bei Upload des Bildes
|
||||
if(isset($_POST['submitbild']))
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user