Skip to content
Snippets Groups Projects
Commit 26a74ba3 authored by Laurent Destailleur's avatar Laurent Destailleur
Browse files

Add constant to allow a module to disable injection scan for its pages.

parent 0ef5fe24
No related branches found
No related tags found
No related merge requests found
......@@ -151,13 +151,16 @@ if (! empty($_SERVER["PHP_SELF"]))
analyseVarsForSqlAndScriptsInjection($morevaltochecklikepost,2);
}
// Sanity check on GET parameters
if (! empty($_SERVER["QUERY_STRING"]))
if (! defined('NOSCANGETFORINJECTION') && ! empty($_SERVER["QUERY_STRING"]))
{
$morevaltochecklikeget=array($_SERVER["QUERY_STRING"]);
analyseVarsForSqlAndScriptsInjection($morevaltochecklikeget,1);
}
// Sanity check on POST
analyseVarsForSqlAndScriptsInjection($_POST,0);
if (! defined('NOSCANPOSTFORINJECTION'))
{
analyseVarsForSqlAndScriptsInjection($_POST,0);
}
// This is to make Dolibarr working with Plesk
if (! empty($_SERVER['DOCUMENT_ROOT'])) set_include_path($_SERVER['DOCUMENT_ROOT'].'/htdocs');
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment