diff options
| author | Ludovic Pouzenc <ludovic@pouzenc.fr> | 2016-08-28 10:24:42 +0200 |
|---|---|---|
| committer | Ludovic Pouzenc <ludovic@pouzenc.fr> | 2016-08-28 10:24:42 +0200 |
| commit | dc26f4210708668ab860ab9169e65a56f1958a2a (patch) | |
| tree | 0fb7523f388055c748e911eae6b5103d72c6fe5e /api/gen_firm.php | |
| parent | 53bee7f8fc073d2128f9b542e2b676b4fd3e8b84 (diff) | |
| download | chd_gestion-dc26f4210708668ab860ab9169e65a56f1958a2a.zip chd_gestion-dc26f4210708668ab860ab9169e65a56f1958a2a.tar.gz chd_gestion-dc26f4210708668ab860ab9169e65a56f1958a2a.tar.bz2 | |
Same security fix for others API scripts
Diffstat (limited to 'api/gen_firm.php')
| -rw-r--r-- | api/gen_firm.php | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/api/gen_firm.php b/api/gen_firm.php index 8c08030..a62d9b3 100644 --- a/api/gen_firm.php +++ b/api/gen_firm.php @@ -21,8 +21,11 @@ include_once('inc/config.php'); $mysqli = new mysqli($db_config['host'], $db_config['username'], $db_config['password'], $db_config['database']); +if (mysqli_connect_errno()) { + die(mysqli_connect_error()); +} unset($db_config); -$mysqli->query("SET NAMES 'utf8'"); +$mysqli->set_charset("utf8") or die($mysqli->error); $arg_ip4pub=(array_key_exists('ip4pub', $_GET) && preg_match('/^[0-9.]+$/', $_GET['ip4pub']))?$_GET['ip4pub']:NULL; |