cacert
/
cacert-webdb
8
0
Fork 0
Code Issues Pull Requests 7 Projects Releases 2 Wiki Activity

Improved register_globals

Browse Source
pull/1/head
root 16 years ago
parent 6203df9b0d
commit 0af4d1943c
1 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File

24
includes/account.php
Unescape Escape View File

@ -1850,12 +1850,12 @@
if($oldid == 24 && $process != "") if($oldid == 24 && $process != "")
{ {
$id = intval($oldid); $id = intval($oldid);
$_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($O))); $_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['O'])));
$_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($contact))); $_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['contact'])));
$_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($L))); $_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['L'])));
$_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($ST))); $_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['ST'])));
$_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($C))); $_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['C'])));
$_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($comments))); $_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['comments'])));
if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "") if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "")
{ {
@ -1877,12 +1877,12 @@
if($oldid == 27 && $process != "") if($oldid == 27 && $process != "")
{ {
$id = intval($oldid); $id = intval($oldid);
$_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($O))); $_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['O'])));
$_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($contact))); $_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['contact'])));
$_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($L))); $_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['L'])));
$_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($ST))); $_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['ST'])));
$_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($C))); $_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['C'])));
$_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($comments))); $_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['comments'])));
if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "") if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "")
{ {

Write Preview
Loading…
Cancel
Save