Changeset 3746:0cae5565cdc8 for admin/blogs.php

Timestamp:

03/30/18 13:36:59 (7 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Fix potential reflective XSS, thank's Zekvan Arslan for report (via Daniel Bishtawi from https://www.netsparker.com/)

File:

admin/blogs.php

r3731	r3746
75	75	if ($order !== '' && in_array($order, $order_combo, true)) {
76	76	$params['order'] = $sortby . ' ' . $order;
	77	} else {
	78	$order = 'desc';
77	79	}
78	80	} else {

Note: See TracChangeset for help on using the changeset viewer.