Browse Source

Security issue: Added Security::remove_XSS function

Julio Montoya 15 years ago
parent
commit
c250e4765b
1 changed files with 1 additions and 1 deletions
  1. 1 1
      main/admin/add_many_session_to_category.php

+ 1 - 1
main/admin/add_many_session_to_category.php

@@ -139,7 +139,7 @@ $sql = "SELECT id, name  FROM $tbl_session $where ORDER BY name";
 $result=Database::query($sql);
 $rows_session = Database::store_result($result);
 ?>
-<form name="formulaire" method="post" action="<?php echo api_get_self(); ?>?page=<?php echo $_GET['page']; if(!empty($_GET['add'])) echo '&add=true' ; ?>" style="margin:0px;" <?php if($ajax_search){echo ' onsubmit="valide();"';}?>>
+<form name="formulaire" method="post" action="<?php echo api_get_self(); ?>?page=<?php echo Security::remove_XSS($_GET['page']); if(!empty($_GET['add'])) echo '&add=true' ; ?>" style="margin:0px;" <?php if($ajax_search){echo ' onsubmit="valide();"';}?>>
 <input type="hidden" name="formSent" value="1" />
 <?php
 if(!empty($errorMsg))