Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-12793

PARAM_HOST incorrect cleaning

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 1.6, 1.7, 1.8, 1.9
    • 1.6.6, 1.7.4, 1.8.4, 1.9
    • General
    • None
    • MOODLE_16_STABLE, MOODLE_17_STABLE, MOODLE_18_STABLE, MOODLE_19_STABLE
    • MOODLE_16_STABLE, MOODLE_17_STABLE, MOODLE_18_STABLE, MOODLE_19_STABLE

    Description

      incorrect use of preg_replace:

      case PARAM_HOST: // allow FQDN or IPv4 dotted quad
      preg_replace('/[^\.\d\w-]/','', $param ); // only allowed chars
      ....

      Attachments

        Activity

          People

            skodak Petr Skoda
            skodak Petr Skoda
            Nobody Nobody
            Adrian Greeve, David Woloszyn, Huong Nguyen, Jake Dallimore, Meirza, Michael Hawkins, Raquel Ortega, Safat Shahin, Stevani Andolo
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              11/Jan/08