yetangitu/Oinktube
1
0
Fork 0
mirror of https://github.com/DanielnetoDotCom/YouPHPTube synced 2025-10-03 01:39:24 +02:00
Code Issues Releases Wiki Activity

https://github.com/WWBN/AVideo/security/advisories/GHSA-pgvh-p3g4-86jw

Browse source
This commit is contained in:
DanieL 2023-01-31 15:54:03 -03:00
parent 296dc7df94
commit 0e299f7166
3 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
install/checkConfiguration.php
View file

@ -4,7 +4,7 @@ if (file_exists("../videos/configuration.php")) {
exit; exit;
} }
$installationVersion = "12.3"; $installationVersion = "12.4";
error_log("Installation: ".__LINE__." ". json_encode($_POST)); error_log("Installation: ".__LINE__." ". json_encode($_POST));
header('Content-Type: application/json'); header('Content-Type: application/json');

4
objects/security.php
View file

@ -80,12 +80,12 @@ foreach ($scanVars as $value) {
if (!empty($scanThis[$value])) { if (!empty($scanThis[$value])) {
if (is_string($scanThis[$value])) { if (is_string($scanThis[$value])) {
$scanThis[$value] = fixQuotesIfSafari($scanThis[$value]); $scanThis[$value] = fixQuotesIfSafari($scanThis[$value]);
$scanThis[$value] = str_replace("'", "", trim($scanThis[$value])); $scanThis[$value] = str_replace(array("'","`"), array('', ''), trim($scanThis[$value]));
} elseif (is_array($scanThis[$value])) { } elseif (is_array($scanThis[$value])) {
foreach ($scanThis[$value] as $key => $value2) { foreach ($scanThis[$value] as $key => $value2) {
if (is_string($scanThis[$value][$key])) { if (is_string($scanThis[$value][$key])) {
$scanThis[$value] = fixQuotesIfSafari($scanThis[$value]); $scanThis[$value] = fixQuotesIfSafari($scanThis[$value]);
$scanThis[$value][$key] = str_replace("'", "", trim($scanThis[$value][$key])); $scanThis[$value][$key] = str_replace(array("'","`"), array('', ''), trim($scanThis[$value][$key]));
} }
} }
} }

1
updatedb/updateDb.v12.4.sql Normal file
View file

@ -0,0 +1 @@
UPDATE configurations SET version = '12.4', modified = now() WHERE id = 1;