blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-07-22 09:22:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Diverse SQL-Injection Lücken geschlossen

Browse Source
This commit is contained in:
Andreas Österreicher
2014-12-01 10:07:21 +00:00
parent 9325ebecbf
commit f670f45d2f
87 changed files with 4310 additions and 2015 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/fachbereich.class.php
+2 -5
View File
@@ -67,8 +67,6 @@ class fachbereich extends basis_db
return false;
}
// Don't turn to garbage when getAll is called twice.
// TODO: Should most likely also be done in 'loadArray' [and every other file], but I don't know what it's used for.
$this->result = array();
while($row = $this->db_fetch_object())
@@ -101,8 +99,7 @@ class fachbereich extends basis_db
if(count($kurzbzs)==0)
return true;
$kurzbzs = "'".implode("','",$kurzbzs)."'";
$qry = 'SELECT * FROM public.tbl_fachbereich WHERE fachbereich_kurzbz in('.$kurzbzs.')';
$qry = 'SELECT * FROM public.tbl_fachbereich WHERE fachbereich_kurzbz in('.$this->implode4SQL($kurzbzs).')';
if ($aktiv)
$qry.=' AND aktiv=true';
@@ -286,4 +283,4 @@ class fachbereich extends basis_db
}
}
}
?>
?>