GNUsocial
/
gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

Escape argument to prevent SQL injection attack in 

User::getTaggedSubscriptions()

This change escapes the $tag argument to prevent a SQL injection
attack in User::getTaggedSubscriptions(). The parameter was not
escaped higher up the stack, so this vulnerability could be exploited.
This commit is contained in:
Joshua Wise 2013-07-16 10:47:29 -07:00 committed by Evan Prodromou
parent 4a30da924a
commit 89ba820246
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
classes/User.php
View File

@ -758,7 +758,7 @@ class User extends Managed_DataObject
$profile = new Profile();
$profile->query(sprintf($qry, $this->id, $tag));
$profile->query(sprintf($qry, $this->id, $profile->escape($tag)));
return $profile;
}