Browse Source

[svn r11875] $_SERVER['PHP_SELF'], api_get_self()

Patrick Cool 18 years ago
parent
commit
04d066e9ba
1 changed files with 3 additions and 0 deletions
  1. 3 0
      main/inc/global.inc.php

+ 3 - 0
main/inc/global.inc.php

@@ -406,4 +406,7 @@ if(mysql_num_rows($q_last_connection) > 0)
 	$s_sql_update_logout_date="UPDATE $tbl_track_login SET logout_date=NOW() WHERE login_id='$i_id_last_connection'";
 	api_sql_query($s_sql_update_logout_date);
 }
+
+// preventing XSS injections on all scripts at once
+$_SERVER['PHP_SELF'] = api_get_self();
 ?>