fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-04 01:01:41 +09:00
Code Issues Projects Releases Packages Wiki Activity

Don't allow arrays in mid, vid, act, module parameters

Browse source
This commit is contained in:
Kijin Sung 2025-03-08 14:49:32 +09:00
parent 445f760856
commit 609e16fd62
1 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
classes/context/Context.class.php
View file

@ -1489,9 +1489,18 @@ class Context
}
foreach($val as $_key => $_val)
{
if(is_array($_val))
if($is_array)
{
$_val = self::_filterRequestVar($key, $_val);
if(in_array($key, array('mid', 'vid', 'act', 'module')))
{
self::$_instance->security_check = 'DENY ALL';
self::$_instance->security_check_detail = 'ERR_UNSAFE_VAR';
$_val = null;
}
else
{
$_val = self::_filterRequestVar($key, $_val);
}
}
elseif($_val = trim($_val))
{