Project

General

Profile

« Previous | Next » 

Revision 656

Added by thorn over 17 years ago

Added some missing add_slashes(), get_post_escaped(), and strip_tags() for $_POST, $_GET and $_REQUEST-data. Also for $_SERVER['PHP_SELF'].

View differences:

uninstall.php
23 23 

  		




  24
  24
  
    
*/


  		




  25
  25
  
    

  		




  
  26
  
    
// Setup admin object


  		




  
  27
  
    
require('../../config.php');


  		




  
  28
  
    
require_once(WB_PATH.'/framework/class.admin.php');


  		




  
  29
  
    
$admin = new admin('Addons', 'modules_uninstall');


  		




  
  30
  
    

  		




  26
  31
  
    
// Check if user selected module


  		




  27
  32
  
    
if(!isset($_POST['file']) OR $_POST['file'] == "") {


  		




  28
  33
  
    
	header("Location: index.php");


  		




  29
  34
  
    
	exit(0);


  		




  30
  35
  
    
} else {


  		




  31
  
  
    
	$file = $_POST['file'];


  		




  
  36
  
    
	$file = $admin->add_slashes($_POST['file']);


  		




  32
  37
  
    
}


  		




  33
  38
  
    

  		




  34
  39
  
    
// Extra protection


  		




  ......




  37
  42
  
    
	exit(0);


  		




  38
  43
  
    
}


  		




  39
  44
  
    

  		




  40
  
  
    
// Setup admin object


  		




  41
  
  
    
require('../../config.php');


  		




  42
  
  
    
require_once(WB_PATH.'/framework/class.admin.php');


  		




  43
  
  
    
$admin = new admin('Addons', 'modules_uninstall');


  		




  44
  
  
    

  		




  45
  45
  
    
// Include the WB functions file


  		




  46
  46
  
    
require_once(WB_PATH.'/framework/functions.php');


  		




  47
  47
  
    

  		












Also available in:  Unified diff