Diverse SQL-Injection Lücken geschlossen

This commit is contained in:
Andreas Österreicher
2014-12-01 10:07:21 +00:00
parent 9325ebecbf
commit f670f45d2f
87 changed files with 4310 additions and 2015 deletions
+2 -2
View File
@@ -602,7 +602,7 @@ class benutzerberechtigung extends basis_db
{
$childoes = $oe->getChilds($b->oe_kurzbz);
foreach($childoes as $row)
$not .="'".addslashes($row)."',";
$not .="'".$this->db_escape($row)."',";
}
else
return array();
@@ -613,7 +613,7 @@ class benutzerberechtigung extends basis_db
{
$childoes = $oe->getChilds($b->oe_kurzbz);
foreach($childoes as $row)
$in .= "'".addslashes($row)."',";
$in .= "'".$this->db_escape($row)."',";
}
else
{