diff options
| author | polo <ordipolo@gmx.fr> | 2025-06-25 02:09:12 +0200 |
|---|---|---|
| committer | polo <ordipolo@gmx.fr> | 2025-06-25 02:09:12 +0200 |
| commit | 3e17f6ef6983a9f24ca658fd1b9f856d3f09fcd7 (patch) | |
| tree | 6207d441a7810d8104989c5ccd92a2bbb77c4bf8 /public/index.php | |
| parent | e30385768e2ff259e384973ec451cff8f3b9ddbb (diff) | |
| download | cms-3e17f6ef6983a9f24ca658fd1b9f856d3f09fcd7.zip | |
nettoyage qui n'abime pas les id du genre "n16"
Diffstat (limited to 'public/index.php')
| -rw-r--r-- | public/index.php | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/public/index.php b/public/index.php index 56af032..8d3148c 100644 --- a/public/index.php +++ b/public/index.php | |||
| @@ -53,8 +53,7 @@ require '../src/controller/post.php'; | |||
| 53 | $id = ''; | 53 | $id = ''; |
| 54 | if(!empty($_GET['id'])) | 54 | if(!empty($_GET['id'])) |
| 55 | { | 55 | { |
| 56 | $id = (int)$_GET['id']; // (int) évite les injections, pas parfait d'après chatgpt | 56 | $id = htmlspecialchars($_GET['id']); |
| 57 | //$id = Security::quelqueChose($_GET['id']); | ||
| 58 | } | 57 | } |
| 59 | 58 | ||
| 60 | if(isset($_GET['action']) && $_GET['action'] === 'deconnexion') | 59 | if(isset($_GET['action']) && $_GET['action'] === 'deconnexion') |