From 810092aec6f9481c7bac1279875596d4f88e63f7 Mon Sep 17 00:00:00 2001
From: Maximilien Bersoult <mbersoult@centreon.com>
Date: Mon, 30 Apr 2018 13:57:18 +0200
Subject: [PATCH] fix(sec): Fix SQL injection in Curve template
* Fix SQL injection in curve template search field
---
.../views/componentTemplates/listComponentTemplates.php | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/www/include/views/componentTemplates/listComponentTemplates.php b/www/include/views/componentTemplates/listComponentTemplates.php
index f81dab4b3f..57e46e7017 100644
--- a/www/include/views/componentTemplates/listComponentTemplates.php
+++ b/www/include/views/componentTemplates/listComponentTemplates.php
@@ -43,7 +43,7 @@ $SearchTool = null;
$search = '';
if (isset($_POST['searchCurve']) && $_POST['searchCurve']) {
$search = $_POST['searchCurve'];
- $SearchTool = " WHERE name LIKE '%".$search."%'";
+ $SearchTool = " WHERE name LIKE '%" . $pearDB->escape($search) . "%'";
}
$DBRESULT = $pearDB->query("SELECT COUNT(*) FROM giv_components_template".$SearchTool);
@@ -163,7 +163,7 @@ $o2 = $form->getElement('o2');
$o2->setValue(null);
$tpl->assign('limit', $limit);
-$tpl->assign('searchCurve', $search);
+$tpl->assign('searchCurve', htmlentities($search));
/*
* Apply a template definition
--
GitLab