Browse Source

[svn r19962] Cover additional security flaw by filtering $compare_function

Yannick Warnier 16 years ago
parent
commit
bc51d5492b
1 changed files with 1 additions and 0 deletions
  1. 1 0
      main/inc/lib/tablesort.lib.php

+ 1 - 0
main/inc/lib/tablesort.lib.php

@@ -88,6 +88,7 @@ class TableSort
 		if(!is_array($data) or count($data)==0){return array();}
         if($column != strval(intval($column))){return $data;} //probably an attack
         if(!in_array($direction,array(SORT_ASC,SORT_DESC))){return $data;} // probably an attack
+        $compare_function = '';
 		switch ($type)
 		{
 			case SORT_REGULAR :