Fix for CVE-2015-5243
This commit is contained in:
parent
18849d1a98
commit
cb2d186975
1 changed files with 78 additions and 74 deletions
|
@ -363,11 +363,15 @@ while (list($key,$val) = each($rawdata))
|
|||
{
|
||||
if ($field != '')
|
||||
{
|
||||
$var = '$r'.getvarname($field);
|
||||
//$var = '$r'.getvarname($field);
|
||||
$itm = trim(substr($val,$pos+strlen($match)));
|
||||
|
||||
if ($itm!='')
|
||||
eval($var.'="'.str_replace('"','\"',$itm).'";');
|
||||
//eval($var.'="'.str_replace('"','\"',$itm).'";');
|
||||
{
|
||||
$var = 'r'.getvarname($field);
|
||||
$$var = str_replace('"','\"',$itm);
|
||||
}
|
||||
}
|
||||
|
||||
if (!$scanall)
|
||||
|
|
Loading…
Reference in a new issue