mirror of
https://github.com/ZoneMinder/zoneminder.git
synced 2026-10-13 23:31:32 -04:00
Prevent XSS throu mids
This commit is contained in:
1 parent
f1a26b90b6
commit
bf32bd6926
1 file changed
+1
-1
@@ -23,7 +23,7 @@ if ( isset($_REQUEST['mid']) ) {
|
||||
$mids = array();
|
||||
$mids[] = validInt($_REQUEST['mid']);
|
||||
} else if ( isset($_REQUEST['mids']) ) {
|
||||
$mids = $_REQUEST['mids'];
|
||||
$mids = arrap_map(function($thing){return validInt($thing);}, $_REQUEST['mids'] );
|
||||
} else {
|
||||
$mids = dbFetchAll('SELECT Id FROM Monitors'.($user->unviewableMonitorIds() ? 'WHERE Id IN ('.$user->viewableMonitorIds().')' : ''), 'Id');
|
||||
}
|
||||
|
||||
Reference in new issue
Block a user