deon/phpldapadmin
1
0
Fork 0
Code Issues 36 Pull Requests Packages Projects Releases Wiki Activity

update get_request when an error occurs

Browse Source 
Example to use to prevent XSS attack from get_request

get_request('cmd','REQUEST',false,null,true)
This commit is contained in:
Genaro Contreras Gutierrez 2019-07-30 08:44:10 -07:00 committed by GitHub
parent 25cbb26e1d
commit c22c98c463
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/functions.php
View File

@ -675,7 +675,7 @@ function get_request($attr,$type='POST',$die=false,$default=null,$preventXSS=fal
system_message(array(
'title'=>_('Generic Error'),
'body'=>sprintf('%s: Called "%s" without "%s" using "%s"',
basename($_SERVER['PHP_SELF']),get_request('cmd','REQUEST'),preventXSS($attr),preventXSS($type)),
basename($_SERVER['PHP_SELF']),get_request('cmd','REQUEST',false,null,true),preventXSS($attr),preventXSS($type)),
'type'=>'error'),
'index.php');
if($preventXSS && !is_null($value))