Forráskód Böngészése

Security - Added filtering of search_term variable

ywarnier 14 éve
szülő
commit
a68da1c951
1 módosított fájl, 1 hozzáadás és 1 törlés
  1. 1 1
      main/auth/courses_controller.php

+ 1 - 1
main/auth/courses_controller.php

@@ -141,7 +141,7 @@ class CoursesController { // extends Controller {
         $data['browse_courses_in_category'] = $this->model->search_courses($search_term);
         $data['browse_course_categories']   = $browse_course_categories;
 
-        $data['search_term'] = $search_term;
+        $data['search_term'] = Security::remove_XSS($search_term); //filter before showing in template
 
         // getting all the courses to which the user is subscribed to
         $curr_user_id = api_get_user_id();