Admin lib SQL Injection fixes #228 #230

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

shravan97 wants to merge 1 commit into delta:master from shravan97:sql_inj_fix

Member

shravan97 commented Oct 21, 2017

For the first vulnerability

Remove all double quotes if present in the name (this is under the assumption that full names usually don't contain special characters )

For the second vulnerability

Explicitly check if $id is a number


          Admin lib SQL Injection fixes delta#228

102476f

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet