Merge pull request #43 from bram1000/master

Fix CVE-2023-36993, CVE-2023-36994, CVE-2023-36995
This commit is contained in:
Catalin Novgorodschi
2024-05-15 12:54:07 +03:00
committed by GitHub
7 changed files with 16 additions and 7 deletions
+2 -2
View File
@@ -36,12 +36,12 @@ if($_POST) {
if(substr($key, 0, 8) == 'linkname') {
$i = substr($key, 8);
$links[$i]['linkname'] = mysqli_real_escape_string($database->dblink, $value);
$links[$i]['linkname'] = htmlspecialchars(mysqli_real_escape_string($database->dblink, $value));
}
if(substr($key, 0, 8) == 'linkziel') {
$i = substr($key, 8);
$links[$i]['linkziel'] = mysqli_real_escape_string($database->dblink, $value);
$links[$i]['linkziel'] = htmlspecialchars(mysqli_real_escape_string($database->dblink, $value));
}
}