mirror of
https://github.com/FH-Complete/FHC-Core.git
synced 2026-07-24 10:22:18 +00:00
Diverse SQL-Injection Lücken geschlossen
This commit is contained in:
@@ -602,7 +602,7 @@ class benutzerberechtigung extends basis_db
|
||||
{
|
||||
$childoes = $oe->getChilds($b->oe_kurzbz);
|
||||
foreach($childoes as $row)
|
||||
$not .="'".addslashes($row)."',";
|
||||
$not .="'".$this->db_escape($row)."',";
|
||||
}
|
||||
else
|
||||
return array();
|
||||
@@ -613,7 +613,7 @@ class benutzerberechtigung extends basis_db
|
||||
{
|
||||
$childoes = $oe->getChilds($b->oe_kurzbz);
|
||||
foreach($childoes as $row)
|
||||
$in .= "'".addslashes($row)."',";
|
||||
$in .= "'".$this->db_escape($row)."',";
|
||||
}
|
||||
else
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user