Admin lib SQL Injection fixes #228#230

Open

shravan97 wants to merge 1 commit intodelta:masterfrom

shravan97:sql_inj_fix

Member

shravan97 commented Oct 21, 2017

For the first vulnerability

Remove all double quotes if present in the name (this is under the assumption that full names usually don't contain special characters )

For the second vulnerability

Explicitly check if $id is a number


          Admin lib SQL Injection fixes delta#228

102476f

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet