SQL Injection / XSS fixes

This commit is contained in:
Marcus Hill
2022-03-27 20:02:16 +01:00
parent 4650947241
commit 816ba87485
22 changed files with 95 additions and 79 deletions

View File

@@ -69,7 +69,7 @@
}
if(!empty($_GET['sb'])){
$sb = $_GET['sb'];
$sb = strip_tags(mysqli_real_escape_string($mysqli, $_GET['sb']));
}else{
$sb = "invoice_number";
}