mirror of
https://github.com/itflow-org/itflow
synced 2026-02-28 02:44:53 +00:00
Remove some tags there and here some more output formatting all thanks to the great security researcher @indevi0us for pointing these out to us.
This commit is contained in:
@@ -4,7 +4,7 @@
|
||||
|
||||
if(isset($_GET['query'])){
|
||||
|
||||
$query = mysqli_real_escape_string($mysqli,$_GET['query']);
|
||||
$query = strip_tags(mysqli_real_escape_string($mysqli,$_GET['query']));
|
||||
|
||||
$phone_query = preg_replace("/[^0-9]/", '',$query);
|
||||
if(empty($phone_query)){
|
||||
|
||||
Reference in New Issue
Block a user