Changeset 3119746

Timestamp:

07/17/2024 12:47:41 AM (21 months ago)

Author:

webangon

Message:

String sanitisation

File:

• news-element/trunk/includes/ajax_posts.php (modified) (1 diff)

news-element/trunk/includes/ajax_posts.php

@@ -42 +42 @@
  
             $per_page = esc_attr($_POST['xlxtra_data']['per_page']);
-            $template = esc_attr($_POST['xlxtra_data']['template']);
+            $template = sanitize_key($_POST['xlxtra_data']['template']);
             $metaf = esc_attr($_POST['xlxtra_data']['metaf']);
             $metar = esc_attr($_POST['xlxtra_data']['metar']);