Patch by Brian Duggan <bduggan@oven.com> -- security improvements.
git-svn-id: svn://10.0.0.236/trunk@62314 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -29,7 +29,7 @@ ConnectToDatabase();
|
||||
|
||||
my @row;
|
||||
if (defined $::FORM{'attach_id'}) {
|
||||
SendSQL("select mimetype, thedata from attachments where attach_id = $::FORM{'attach_id'}");
|
||||
SendSQL("select mimetype, thedata from attachments where attach_id =".SqlQuote($::FORM{'attach_id'});
|
||||
@row = FetchSQLData();
|
||||
}
|
||||
if (!@row) {
|
||||
|
||||
Reference in New Issue
Block a user