Changeset 704 for trunk/phpbms/modules/base/attachments_records.php

Timestamp:

01/01/10 23:10:02 (2 years ago)

Author:

brieb

Message:

• Fixed several SQL injection vulnerabilities
• Fixed several XSS vulnerabilities due to PHP_SELF and REQUREST_URI
• Fixed severa path disclosure errors

Files:

• trunk/phpbms/modules/base/attachments_records.php (modified) (2 diffs)

trunk/phpbms/modules/base/attachments_records.php

@@ -80 +80 @@
                 $_POST["startnum"]=1;
         } elseif($_POST["desc"]!="")  $displayTable->querysortorder.=" DESC";
-        
+
         //record offset?
         if(isset($_POST["offset"])) if($_POST["offset"]!="") $displayTable->recordoffset=$_POST["offset"];
@@ -94 +94 @@
         <h1><?php echo $pageTitle ?></h1>
         <div>
-                <form name="search" id="search" action="<?php echo $_SERVER["REQUEST_URI"]?>" method="post" onsubmit="setSelIDs(this);return true;">
+                <form name="search" id="search" action="<?php echo htmlentities($_SERVER["REQUEST_URI"])?>" method="post" onsubmit="setSelIDs(this);return true;">
                 <input name="theids" type="hidden" value="" />
                 <?php