Diverse SQL-Injection Lücken geschlossen

This commit is contained in:
Andreas Österreicher
2014-12-01 10:07:21 +00:00
parent 9325ebecbf
commit f670f45d2f
87 changed files with 4310 additions and 2015 deletions
+8
View File
@@ -86,6 +86,14 @@ function resize($filename, $width, $height)
if(!isset($_GET['person_id']))
die($p->t('global/fehlerBeiDerParameteruebergabe'));
$person = new person();
if(isset($_SESSION['prestudent/user']))
$person_id=$person->checkZugangscode($_SESSION['prestudent/user']);
if(isset($_SESSION['incoming/user']))
$person_id=$person->checkZugangscode($_SESSION['prestudent/user']);
if($person_id!=$_GET['person_id'])
die('Sie haben keine Berechtigung für diese Seite');
//Bei Upload des Bildes
if(isset($_POST['submitbild']))
{