mbirth/LuckyCoinkydink
1
0
Fork 0
Code Issues Pull Requests Activity

upport security bugfix to escape dbType parameter on first installation (issue #433)

Browse Source
This commit is contained in:
Garvin Hicking 2016-12-19 11:18:10 +01:00
parent ccfc8c31c2
commit fd2f23f3e7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
include/functions_installer.inc.php
View File

@ -637,7 +637,7 @@ function serendipity_checkInstallation() {
$errs[] = INSTALL_PASSWORD_INVALID;
}
$serendipity['dbType'] = $_POST['dbType'];
$serendipity['dbType'] = preg_replace('@[^a-z0-9-]@imsU', '', $_POST['dbType']);
// Probe database
// (do it after the dir stuff, as we need to be able to create the sqlite database)
include_once(S9Y_INCLUDE_PATH . "include/db/{$serendipity['dbType']}.inc.php");