From 765cb0a39f0d0a2252b78f4b3fd70bcaff50a57e Mon Sep 17 00:00:00 2001 From: hickert Date: Tue, 3 Nov 2009 07:28:34 +0000 Subject: [PATCH 1/1] Updated functions.inc get_post() -validate before we strip slashes... git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@14724 594d385d-05f5-0310-b6e9-bd551577e9d8 --- gosa-core/include/functions.inc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gosa-core/include/functions.inc b/gosa-core/include/functions.inc index d9a82de75..20d09e27e 100644 --- a/gosa-core/include/functions.inc +++ b/gosa-core/include/functions.inc @@ -2420,10 +2420,11 @@ function get_post($name) trigger_error("Requested POST value (".$name.") does not exists, you should add a check to prevent this message."); return(FALSE); } + if(get_magic_quotes_gpc()){ - return(stripcslashes($_POST[$name])); + return(stripcslashes(validate($_POST[$name]))); }else{ - return($_POST[$name]); + return(validate($_POST[$name])); } } -- 2.30.2