Fix and enable input filtering through include/filter.php
This commit is contained in:
@@ -18,25 +18,25 @@ function build_app_list()
|
||||
echo "</select>\n";
|
||||
}
|
||||
|
||||
if($_REQUEST['sCmd'])
|
||||
if($aClean['sCmd'])
|
||||
{
|
||||
if($_REQUEST['sCmd'] == "delete")
|
||||
if($aClean['sCmd'] == "delete")
|
||||
{
|
||||
$hResult = query_parameters("DELETE FROM appBundle WHERE appId ='?' AND bundleId = '?'",
|
||||
$_REQUEST['iAppId'], $_REQUEST['iBundleId']);
|
||||
$aClean['iAppId'], $aClean['iBundleId']);
|
||||
if($hResult)
|
||||
addmsg("App deleted from bundle", "green");
|
||||
else
|
||||
addmsg("Failed to delete app from bundle!", "red");
|
||||
}
|
||||
if($_REQUEST['sCmd'] == "add")
|
||||
if($aClean['sCmd'] == "add")
|
||||
{
|
||||
$hResult = query_parameters("INSERT INTO appBundle (bundleId, appId) VALUES".
|
||||
"('?', '?')",
|
||||
$_REQUEST['iBundleId'],
|
||||
$_REQUEST['iAppId']);
|
||||
$aClean['iBundleId'],
|
||||
$aClean['iAppId']);
|
||||
if($hResult)
|
||||
addmsg("App $appId added to Bundle".$_REQUEST['iBundleId'], "green");
|
||||
addmsg("App $appId added to Bundle".$aClean['iBundleId'], "green");
|
||||
}
|
||||
}
|
||||
|
||||
@@ -45,7 +45,7 @@ apidb_header("Edit Application Bundle");
|
||||
|
||||
$hResult = query_parameters("SELECT bundleId, appBundle.appId, appName FROM appBundle, appFamily ".
|
||||
"WHERE bundleId = '?' AND appFamily.appId = appBundle.appId",
|
||||
$_REQUEST['iBundleId']);
|
||||
$aClean['iBundleId']);
|
||||
|
||||
echo html_frame_start("Apps in this Bundle","300",'',0);
|
||||
echo "<table width='100%' border=0 cellpadding=3 cellspacing=0>\n\n";
|
||||
@@ -63,7 +63,7 @@ if($hResult && mysql_num_rows($hResult))
|
||||
//set row color
|
||||
if ($c % 2 == 1) { $bgcolor = 'color0'; } else { $bgcolor = 'color1'; }
|
||||
|
||||
$delete_link = "[<a href='editBundle.php?sCmd=delete&iBundleId=".$_REQUEST['iBundleId']."&iAppId=$oRow->appId'>delete</a>]";
|
||||
$delete_link = "[<a href='editBundle.php?sCmd=delete&iBundleId=".$aClean['iBundleId']."&iAppId=$oRow->appId'>delete</a>]";
|
||||
|
||||
echo "<tr class=$bgcolor>\n";
|
||||
echo " <td>$oRow->appName </td>\n";
|
||||
@@ -89,7 +89,7 @@ echo html_frame_start("Application List (double click to add)","",'',2);
|
||||
build_app_list();
|
||||
echo html_frame_end();
|
||||
|
||||
echo "<input type=\"hidden\" name=\"iBundleId\" value=\"".$_REQUEST['iBundleId']."\">\n";
|
||||
echo "<input type=\"hidden\" name=\"iBundleId\" value=\"".$aClean['iBundleId']."\">\n";
|
||||
echo "<input type=\"hidden\" name=\"sCmd\" value=\"add\">\n";
|
||||
echo "</form>\n";
|
||||
|
||||
|
||||
Reference in New Issue
Block a user