AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-02-28 02:44:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed a SQL injection could only work if you had a login thanks disclosure5 for pointing this out from reddit/r/msp

Browse Source
This commit is contained in:
johnnyq
2021-12-12 01:22:39 -05:00
parent efb6372190
commit 9e9bb50db0
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
post.php
View File

@@ -251,7 +251,7 @@ if(isset($_POST['edit_profile'])){
if(isset($_POST['edit_user_companies'])){
$user_id = intval($_POST['user_id']);
$companies = $_POST['companies'];
$companies = mysqli_real_escape_string($_POST['companies']);
//Turn the Array into a string with , seperation
$companies_imploded = implode(",",$companies);
@@ -270,7 +270,7 @@ if(isset($_POST['edit_user_companies'])){
if(isset($_POST['edit_user_clients'])){
$user_id = intval($_POST['user_id']);
$clients = $_POST['clients'];
$clients = mysqli_real_escape_string($_POST['clients']);
//Turn the Array into a string with , seperation
$clients_imploded = implode(",",$clients);