diff options
Diffstat (limited to 'inc/secure.php')
| -rwxr-xr-x | inc/secure.php | 11 |
1 files changed, 2 insertions, 9 deletions
diff --git a/inc/secure.php b/inc/secure.php index 99d646d2..32c8f864 100755 --- a/inc/secure.php +++ b/inc/secure.php @@ -5,33 +5,26 @@ foreach ($_GET as $k => $v) { $v = htmlspecialchars($v); -//echo "$v<br>"; $v = mysql_escape_string($v); -//echo "$v<br>"; // $v = htmlentities($v); -//echo "$v<br>"; -// if (preg_match('/([\'"`\'])/', $v, $match)) if (preg_match('/([\"`])/', $v, $match)) { print "sorry get has illegal char '$match[1]'"; exit; } - $$k = $v; + $_GET[$k] = $v; } foreach ($_POST as $k => $v) { $v = htmlspecialchars($v); -//echo "$v<br>"; $v = mysql_escape_string($v); -//echo "$v<br>"; // $v = htmlentities($v); -//echo "$v<br>"; if (preg_match('/([\'"`\'])/', $v, $match)) { print "sorry post has illegal char '$match[1]'"; exit; } - $$k = $v; + $_POST[$k] = $v; } ?> |