mirror/zoneminder
1
0
Fork 0
mirror of https://github.com/ZoneMinder/zoneminder.git synced 2026-03-30 03:32:14 -04:00
Code Issues Packages Projects Releases Wiki Activity

Prevent XSS throu mids

Browse Source
This commit is contained in:
Isaac Connor
2024-01-25 19:12:37 -05:00
parent f1a26b90b6
commit bf32bd6926
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/skins/classic/views/zones.php
View File

@@ -23,7 +23,7 @@ if ( isset($_REQUEST['mid']) ) {
$mids = array();
$mids[] = validInt($_REQUEST['mid']);
} else if ( isset($_REQUEST['mids']) ) {
$mids = $_REQUEST['mids'];
$mids = arrap_map(function($thing){return validInt($thing);}, $_REQUEST['mids'] );
} else {
$mids = dbFetchAll('SELECT Id FROM Monitors'.($user->unviewableMonitorIds() ? 'WHERE Id IN ('.$user->viewableMonitorIds().')' : ''), 'Id');
}