blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-07-23 09:52:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Diverse SQL-Injection Lücken geschlossen

Browse Source
This commit is contained in:
Andreas Österreicher
2014-12-01 10:07:21 +00:00
parent 9325ebecbf
commit f670f45d2f
87 changed files with 4310 additions and 2015 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/schluesseltyp.class.php
+8 -10
View File
@@ -50,7 +50,7 @@ class schluesseltyp extends basis_db
*/
public function save()
{
$qry1='SELECT * FROM public.tbl_schluesseltyp WHERE beschreibung='.$this->addslashes($this->beschreibung).';';
$qry1='SELECT * FROM public.tbl_schluesseltyp WHERE beschreibung='.$this->db_add_param($this->beschreibung).';';
if($this->db_query($qry1))
{
if($this->db_num_rows()>0) //eintrag gefunden
@@ -66,19 +66,17 @@ class schluesseltyp extends basis_db
$dbanzahl=$row1->anzahl;
}
$qry='UPDATE public.tbl_schluesseltyp SET '.
'anzahl ='.$dbanzahl."+".$this->anzahl.' '.
'WHERE beschreibung='.$this->addslashes($this->beschreibung).';';
echo nl2br($qry."\n");
'anzahl ='.($this->db_add_param($dbanzahl+$this->anzahl)).' '.
'WHERE beschreibung='.$this->db_add_param($this->beschreibung).';';
}
}
else
{
$qry='INSERT INTO public.tbl_schluesseltyp (schluesseltyp, beschreibung, anzahl, kaution) VALUES('.
$this->addslashes($this->schluesseltyp).', '.
$this->addslashes($this->beschreibung).', '.
$this->addslashes($this->anzahl).', '.
$this->addslashes($this->kaution).');';
echo nl2br($qry."\n");
$this->db_add_param($this->schluesseltyp).', '.
$this->db_add_param($this->beschreibung).', '.
$this->db_add_param($this->anzahl).', '.
$this->db_add_param($this->kaution).');';
}
if($this->db_query($qry))
{
@@ -97,4 +95,4 @@ class schluesseltyp extends basis_db
}
}
}
?>
?>