瀏覽代碼

[svn r19962] Cover additional security flaw by filtering $compare_function

Yannick Warnier 16 年之前
父節點
當前提交
bc51d5492b
共有 1 個文件被更改,包括 1 次插入0 次删除
  1. 1 0
      main/inc/lib/tablesort.lib.php

+ 1 - 0
main/inc/lib/tablesort.lib.php

@@ -88,6 +88,7 @@ class TableSort
 		if(!is_array($data) or count($data)==0){return array();}
         if($column != strval(intval($column))){return $data;} //probably an attack
         if(!in_array($direction,array(SORT_ASC,SORT_DESC))){return $data;} // probably an attack
+        $compare_function = '';
 		switch ($type)
 		{
 			case SORT_REGULAR :