diff options
| author | Larry Meaney <larry_meaney@iname.com> | 2010-11-30 07:07:20 +0000 |
|---|---|---|
| committer | Larry Meaney <larry_meaney@iname.com> | 2010-11-30 07:07:20 +0000 |
| commit | 8916174c4afcabb8e14fc4bad1cd7320f14a3080 (patch) | |
| tree | b398301f8e83153f7c39ec34064a9414a40cd643 /downloadgedcom.php | |
| parent | c3bc207f78fd093e832bc1eff4662fd4100fbe01 (diff) | |
| download | webtrees-8916174c4afcabb8e14fc4bad1cd7320f14a3080.tar.gz webtrees-8916174c4afcabb8e14fc4bad1cd7320f14a3080.tar.bz2 webtrees-8916174c4afcabb8e14fc4bad1cd7320f14a3080.zip | |
preg_quote the list of gedcoms when validating user input, in case any of the gedcoms have regex characters in their name
Diffstat (limited to 'downloadgedcom.php')
| -rw-r--r-- | downloadgedcom.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/downloadgedcom.php b/downloadgedcom.php index a672478f48..1343000355 100644 --- a/downloadgedcom.php +++ b/downloadgedcom.php @@ -36,7 +36,7 @@ require_once WT_ROOT.'includes/functions/functions_export.php'; if (!isset($_SESSION['exportConvPath'])) $_SESSION['exportConvPath'] = $MEDIA_DIRECTORY; if (!isset($_SESSION['exportConvSlashes'])) $_SESSION['exportConvSlashes'] = 'forward'; -$ged = safe_GET('ged', get_all_gedcoms()); +$ged = safe_GET('ged', preg_quote_array(get_all_gedcoms())); $action = safe_GET('action', 'download'); $remove = safe_GET('remove', 'yes', 'no'); $convert = safe_GET('convert', 'yes', 'no'); |