diff options
author | Dries Buytaert <dries@buytaert.net> | 2001-03-07 21:29:40 +0000 |
---|---|---|
committer | Dries Buytaert <dries@buytaert.net> | 2001-03-07 21:29:40 +0000 |
commit | f516626a293edd613cb823db88e36dcf7e1fb8f4 (patch) | |
tree | ba3dd7432d4d13783e34fbc50a4d4308a142309b /modules/faq.module | |
parent | 2b2e81f6cfce285f466c3c74cb25ad30c581d2cf (diff) | |
download | brdo-f516626a293edd613cb823db88e36dcf7e1fb8f4.tar.gz brdo-f516626a293edd613cb823db88e36dcf7e1fb8f4.tar.bz2 |
A rather large and important update:
revised most of the SQL queries and tried to make drupal as secure as possible (while trying to avoid redundant/duplicate checks). For drupal's sake, try to screw something up. See the mail about PHPNuke being hacked appr. 6 days ago. The one who finds a problem is rewarded a beer (and I'm willing to ship it to Norway if required). I beg you to be evil. Try dumping a table a la "http://localhost/index.php?date=77778;DROP TABLE users" or something. ;)
Diffstat (limited to 'modules/faq.module')
-rw-r--r-- | modules/faq.module | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/modules/faq.module b/modules/faq.module index 63a40addc..283b8e563 100644 --- a/modules/faq.module +++ b/modules/faq.module @@ -106,18 +106,18 @@ function faq_admin() { faq_add(); break; case "delete": - faq_delete($id); + faq_delete(check_input($id)); faq_display(); break; case "edit": - faq_edit($id); + faq_edit(check_input($id)); break; case "Add FAQ": faq_add_save($edit); faq_display(); break; case "Save FAQ": - faq_edit_save($id, $edit); + faq_edit_save(check_input($id), $edit); // fall through: default: faq_display(); |