fix security issue

inboundnow · May 28, 2015 · f47c639 · f47c639
1 parent a1bd4d4
commit f47c639
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/module.lead-splash.php b/modules/module.lead-splash.php
@@ -5,8 +5,8 @@
 $matches = array();
 preg_match('/wp-admin/', $_SERVER['HTTP_REFERER'], $matches, null, 0);
 
-$lead_id = $_GET['lead_id'];
-$page_id = $_GET['post_id'];
+$lead_id = preg_replace('/[^-a-zA-Z0-9_]/', '', $_GET['lead_id']);
+$page_id = preg_replace('/[^-a-zA-Z0-9_]/', '', $_GET['post_id']);
 $wplead_data = get_post_custom($lead_id);
 
 $data['lead_id'] = $lead_id;