Download as
Browse Code »

Commit d8a2aa3e88bc8d336e67e5db5b2a935d45c4749e

Authored by Lucas D'Avila
1 parent e132bb38
Exists in master

Escapado string, antes de inserir no banco de dados.

Showing 1 changed file with 2 additions and 0 deletions   Show diff stats
ieducar/intranet/include/clsBase.inc.php
  Diff comments   View file @d8a2aa3
@@ -51,6 +51,7 @@ require_once 'include/funcoes.inc.php'; @@ -51,6 +51,7 @@ require_once 'include/funcoes.inc.php';
51 51
52 require_once 'Portabilis/Utils/Database.php'; 52 require_once 'Portabilis/Utils/Database.php';
53 require_once 'Portabilis/Utils/User.php'; 53 require_once 'Portabilis/Utils/User.php';
  54 +require_once 'Portabilis/String/Utils.php';
54 55
55 require_once 'modules/Error/Mailers/NotificationMailer.php'; 56 require_once 'modules/Error/Mailers/NotificationMailer.php';
56 57
@@ -256,6 +257,7 @@ class clsBase extends clsConfig @@ -256,6 +257,7 @@ class clsBase extends clsConfig
256 } 257 }
257 258
258 $variaveis = "POST\n{$posts}GET\n{$gets}SESSION\n{$sessions}"; 259 $variaveis = "POST\n{$posts}GET\n{$gets}SESSION\n{$sessions}";
  260 + $variaveis = Portabilis_String_Utils::toLatin1($variaveis, array('escape' => true));
259 261
260 if ($this->currentUserId()) { 262 if ($this->currentUserId()) {
261 $this->db()->Consulta("INSERT INTO intranet_segur_permissao_negada (ref_ref_cod_pessoa_fj, ip_externo, ip_interno, data_hora, pagina, variaveis) VALUES('{$this->currentUserId()}', '$ip', '$ip_de_rede', NOW(), '$pagina', '$variaveis')"); 263 $this->db()->Consulta("INSERT INTO intranet_segur_permissao_negada (ref_ref_cod_pessoa_fj, ip_externo, ip_interno, data_hora, pagina, variaveis) VALUES('{$this->currentUserId()}', '$ip', '$ip_de_rede', NOW(), '$pagina', '$variaveis')");