X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=0.2.1%2Fmodules.php;fp=0.2.1%2Fmodules.php;h=f700cb43f3a72ae968dd196a6761efda5c2659d0;hp=3950e6df28c8025591220d2e30fbfdacc92bfaea;hb=985d79f06163e5957c3f40b5a71ce85be9048f8e;hpb=4d62ab22b0616cabb713929f8b661b5470b6018c diff --git a/0.2.1/modules.php b/0.2.1/modules.php index 3950e6df28..f700cb43f3 100644 --- a/0.2.1/modules.php +++ b/0.2.1/modules.php @@ -42,8 +42,8 @@ global $what, $action; $CSS = 0; $GLOBALS['what'] = ""; $GLOBALS['action'] = ""; $GLOBALS['userid'] = 0; -if (!empty($_GET['action'])) $GLOBALS['action'] = trim(strip_tags($_GET['action'])); -if (!empty($_GET['what'])) $GLOBALS['what'] = trim(strip_tags($_GET['what'])); +if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']); +if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']); // Secure the module name (very important line!) $GLOBALS['module'] = htmlentities(strip_tags($_GET['module']), ENT_QUOTES); @@ -126,7 +126,7 @@ if ((!empty($CONFIG['maintenance'])) && ($CONFIG['maintenance'] == "Y") && (!IS_ break; case "404": - ADD_FATAL(LLANG_MOD_REG_404_1.$GLOBALS['module'].LANG_MOD_REG_404_2); + ADD_FATAL(LANG_MOD_REG_404_1.$GLOBALS['module'].LANG_MOD_REG_404_2); break; case "locked":