fixed #1876 Added check_input_parameter for $_GET parameters

Piwigo · Mar 1, 2023 · 721384f · 721384f
1 parent e8b8813
commit 721384f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/admin/history.php b/admin/history.php
@@ -39,6 +39,10 @@
 
 check_status(ACCESS_ADMINISTRATOR);
 
+check_input_parameter('filter_ip', $_GET, false, '/^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/');
+check_input_parameter('filter_image_id', $_GET, false, '/^\d+$/');
+check_input_parameter('filter_user_id', $_GET, false, '/^\d+$/');
+
 // +-----------------------------------------------------------------------+
 // |                             template init                             |
 // +-----------------------------------------------------------------------+