Fix remote security risk, pointed out by Wolfram Kriesing

This commit is contained in:
Tomas V.V.Cox 2002-02-01 16:36:32 +00:00
parent 1cb07caf63
commit 22aee18f0b

View file

@ -534,10 +534,12 @@ class DB
}
foreach ($opts as $opt) {
list($key, $value) = explode('=', $opt);
if (!isset($parsed[$key])) { // don't allow params overwrite
$parsed[$key] = urldecode($value);
}
}
}
}
return $parsed;
}