Changeset 728 for trunk/phpbms/include/search_class.php

Timestamp:

01/07/10 12:45:17 (2 years ago)

Author:

brieb

Message:

• Fixed possible security loopholes in search screen (SQL Manipulation)

Files:

• trunk/phpbms/include/search_class.php (modified) (1 diff)

trunk/phpbms/include/search_class.php

@@ -81 +81 @@
                                         searchroleid,
                                         advsearchroleid,
-                                        viewsqlroleid
+                                        viewsqlroleid,
+                                        editroleid,
+                                        addroleid
                                 FROM
-                                        tabledefs inner join modules on tabledefs.moduleid = modules.uuid
+                                        tabledefs INNER JOIN modules on tabledefs.moduleid = modules.uuid
                                 WHERE
                                         tabledefs.uuid= '".$id."'";