AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-02-28 10:54:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

SQL Injection / XSS fixes

Browse Source
This commit is contained in:
Marcus Hill
2022-03-27 20:02:16 +01:00
parent 4650947241
commit 816ba87485
22 changed files with 95 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
client_logs.php
View File

@@ -58,7 +58,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<div class="card-body">
<form autocomplete="off">
<input type="hidden" name="client_id" value="<?php echo $client_id; ?>">
<input type="hidden" name="tab" value="<?php echo $_GET['tab']; ?>">
<input type="hidden" name="tab" value="<?php echo strip_tags($_GET['tab']); ?>">
<div class="row">
<div class="col-md-4">