Fix remote security risk, pointed out by Wolfram Kriesing

This commit is contained in:
Tomas V.V.Cox 2002-02-01 16:36:32 +00:00
parent 1cb07caf63
commit 22aee18f0b

View file

@ -534,10 +534,12 @@ class DB
} }
foreach ($opts as $opt) { foreach ($opts as $opt) {
list($key, $value) = explode('=', $opt); list($key, $value) = explode('=', $opt);
if (!isset($parsed[$key])) { // don't allow params overwrite
$parsed[$key] = urldecode($value); $parsed[$key] = urldecode($value);
} }
} }
} }
}
return $parsed; return $parsed;
} }