tonyair/silverstripe-reports
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-reports synced 2024-10-22 11:05:53 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #976 from ss23/SS2014004-3-0

Browse Source 
FIX Prevent SQLi when no URL filters are applied
This commit is contained in:
Damian Mooyman 2014-03-27 11:23:20 +13:00
commit 43d308cd1b
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
code/model/SiteTree.php
View File

@ -1584,9 +1584,10 @@ class SiteTree extends DataObject implements PermissionProvider,i18nEntityProvid
} }
} }
$segment = Convert::raw2sql($this->URLSegment);
$existingPage = DataObject::get_one( $existingPage = DataObject::get_one(
'SiteTree', 'SiteTree',
"\"URLSegment\" = '$this->URLSegment' $IDFilter $parentFilter" "\"URLSegment\" = '$segment' $IDFilter $parentFilter"
); );
if ($existingPage) { if ($existingPage) {
return false; return false;