Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sanitize cleanCallback on wakeup. Extra security check for APIs like SecurePoll/auth-api.php.

Browse source
This commit is contained in:
Tim Starling 2009-04-30 05:21:27 +00:00
parent a250e5de46
commit cd367dabbd
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
includes/Status.php
View file

@ -84,6 +84,13 @@ class Status {
$this->ok = false;
}
/**
* Sanitize the callback parameter on wakeup, to avoid arbitrary execution.
*/
function __wakeup() {
$this->cleanCallback = false;
}
protected function cleanParams( $params ) {
if ( !$this->cleanCallback ) {
return $params;