Commit 0c61ce12fff23d39ae94810838877d71f88afc7f

Authored by Edmar Moretti
1 parent 47213e39

Sanitização de parâmetros em arquivos html gerados com php para evitar xss

init/index.php
... ... @@ -20,6 +20,7 @@ if (! empty ( $_GET ["customDir"] )) {
20 20 } else if (empty ( $customDir )) {
21 21 $customDir = "interface";
22 22 }
  23 +include_once (dirname(__FILE__)."/../classesphp/sani_request.php");
23 24 if (! file_exists ( $dir_tmp )) {
24 25 @mkdir ( $dir_tmp, 0744 );
25 26 }
... ...
ogc/index.php
1 1 <?php
2 2 define ( ONDEI3GEO, ".." );
3 3 include (dirname ( __FILE__ ) . "/../ms_configura.php");
  4 +include_once (dirname(__FILE__)."/../classesphp/sani_request.php");
4 5 // pega a extensao geografica
5 6 if ($ogcwsmap == "") {
6 7 $ogcwsmap = $locaplic . "/aplicmap/ogcws.map";
... ...
permlinks/index.php
1 1 <?php
2 2 define ( ONDEI3GEO, ".." );
3 3 include (dirname ( __FILE__ ) . "/../ms_configura.php");
  4 +include_once (dirname(__FILE__)."/../classesphp/sani_request.php");
4 5 if (! empty ( $_GET ["customDir"] )) {
5 6 $customDir = strip_tags ( $_GET ["customDir"] );
6 7 } else if (empty ( $customDir )) {
... ...