Explorar o código

Security - Added filtering of search_term variable

ywarnier %!s(int64=14) %!d(string=hai) anos
pai
achega
a68da1c951
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      main/auth/courses_controller.php

+ 1 - 1
main/auth/courses_controller.php

@@ -141,7 +141,7 @@ class CoursesController { // extends Controller {
         $data['browse_courses_in_category'] = $this->model->search_courses($search_term);
         $data['browse_course_categories']   = $browse_course_categories;
 
-        $data['search_term'] = $search_term;
+        $data['search_term'] = Security::remove_XSS($search_term); //filter before showing in template
 
         // getting all the courses to which the user is subscribed to
         $curr_user_id = api_get_user_id();