ZoneMinder
/
zoneminder
mirror of https://github.com/ZoneMinder/zoneminder.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Sanitise filter[Id] when parsing filter. Fixes GHSA-6rrw-66rf-6g5f

pull/4202/head
Isaac Connor 2024-05-30 10:04:57 -04:00
parent 6cc64dddff
commit 062cf568a3
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
web/skins/classic/views/filter.php
View File

@ -38,7 +38,8 @@ $fid = 0;
if ( isset($_REQUEST['Id']) and $_REQUEST['Id'] ) { if ( isset($_REQUEST['Id']) and $_REQUEST['Id'] ) {
$fid = validInt($_REQUEST['Id']); $fid = validInt($_REQUEST['Id']);
} else if ( isset($_REQUEST['filter']) and isset($_REQUEST['filter']['Id']) ) { } else if ( isset($_REQUEST['filter']) and isset($_REQUEST['filter']['Id']) ) {
$fid = validInt($_REQUEST['filter']['Id']); # $_REQUEST['filter']['Id'] get used later in populating filter object, so need to sanitise it
$fid = $_REQUEST['filter']['Id'] = validInt($_REQUEST['filter']['Id']);
} }
$filter = null; $filter = null;
foreach ( ZM\Filter::find(null,array('order'=>'lower(Name)')) as $Filter ) { foreach ( ZM\Filter::find(null,array('order'=>'lower(Name)')) as $Filter ) {