Diverse SQL-Injection Lücken geschlossen

This commit is contained in:
Andreas Österreicher
2014-12-01 10:07:21 +00:00
parent 9325ebecbf
commit f670f45d2f
87 changed files with 4310 additions and 2015 deletions
+1 -1
View File
@@ -443,7 +443,7 @@ class mitarbeiter extends benutzer
$in='';
foreach ($stge as $stg)
{
$in.=','.$stg;
$in.=','.$this->db_add_param($stg, FHC_INTEGER);
if($stg==0)
{
$in='';