AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-03-19 12:14:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed a SQL injection could only work if you had a login thanks disclosure5 for pointing this out from reddit/r/msp

Browse Source
This commit is contained in:
johnnyq
2021-12-12 01:22:39 -05:00
parent efb6372190
commit 9e9bb50db0
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
logs.php
View File

@@ -135,7 +135,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</form> </form>
<hr> <hr>
<div class="table-responsive"> <div class="table-responsive">
<table class="table table-striped table-borderless table-hover"> <table class="table table-sm table-striped table-borderless table-hover">
<thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>"> <thead class="text-dark <?php if($num_rows[0] == 0){ echo "d-none"; } ?>">
<tr> <tr>
<th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=log_created_at&o=<?php echo $disp; ?>">Timestamp</a></th> <th><a class="text-dark" href="?<?php echo $url_query_strings_sb; ?>&sb=log_created_at&o=<?php echo $disp; ?>">Timestamp</a></th>

4
post.php
View File

@@ -251,7 +251,7 @@ if(isset($_POST['edit_profile'])){
if(isset($_POST['edit_user_companies'])){ if(isset($_POST['edit_user_companies'])){
$user_id = intval($_POST['user_id']); $user_id = intval($_POST['user_id']);
$companies = $_POST['companies']; $companies = mysqli_real_escape_string($_POST['companies']);
//Turn the Array into a string with , seperation //Turn the Array into a string with , seperation
$companies_imploded = implode(",",$companies); $companies_imploded = implode(",",$companies);
@@ -270,7 +270,7 @@ if(isset($_POST['edit_user_companies'])){
if(isset($_POST['edit_user_clients'])){ if(isset($_POST['edit_user_clients'])){
$user_id = intval($_POST['user_id']); $user_id = intval($_POST['user_id']);
$clients = $_POST['clients']; $clients = mysqli_real_escape_string($_POST['clients']);
//Turn the Array into a string with , seperation //Turn the Array into a string with , seperation
$clients_imploded = implode(",",$clients); $clients_imploded = implode(",",$clients);