Strip null bytes out of GPC input strings

mantisbt · Oct 12, 2013 · fc02c46 · fc02c46
1 parent 906cc47
commit fc02c46
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/core/gpc_api.php b/core/gpc_api.php
@@ -111,7 +111,7 @@ function gpc_get_string( $p_var_name, $p_default = null ) {
 		trigger_error( ERROR_GPC_ARRAY_UNEXPECTED, ERROR );
 	}
 
-	return $t_result;
+	return str_replace( "\0","",$t_result );
 }
 
 /**
@@ -256,7 +256,11 @@ function gpc_get_string_array( $p_var_name, $p_default = null ) {
 		trigger_error( ERROR_GPC_ARRAY_EXPECTED, ERROR );
 	}
 
-	return $t_result;
+	$t_array = array();
+	foreach( $t_result as $key => $val ) {
+		$t_array[$key] = str_replace( "\0", "", $val );
+	}
+	return $t_array;
 }
 
 /**