From bc31ed0e4647a568a1596cc2e09664675479a70d Mon Sep 17 00:00:00 2001
From: Pim van den Berg
Date: Fri, 1 Jan 2010 19:36:31 +0100
Subject: better validation of possible user input (get)

---
 detail.php | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

(limited to 'detail.php')

diff --git a/detail.php b/detail.php
index e10fae3..d153768 100644
--- a/detail.php
+++ b/detail.php
@@ -1,6 +1,7 @@
 <?php
 
 require_once 'conf/common.inc.php';
+require_once 'inc/functions.inc.php';
 require_once 'inc/html.inc.php';
 require_once 'inc/collectd.inc.php';
 
@@ -10,11 +11,11 @@ if (empty($_GET['x']))
 if (empty($_GET['y']))
 	$_GET['y'] = $CONFIG['detail-heigth'];
 
-$host = $_GET['h'];
-$plugin = $_GET['p'];
-$pinstance = $_GET['pi'];
-$type = $_GET['t'];
-$tinstance = $_GET['ti'];
+$host = validate_get($_GET['h'], 'host');
+$plugin = validate_get($_GET['p'], 'plugin');
+$pinstance = validate_get($_GET['pi'], 'pinstance');
+$type = validate_get($_GET['t'], 'type');
+$tinstance = validate_get($_GET['ti'], 'tinstance');
 $width = $_GET['x'];
 $heigth = $_GET['y'];
 $seconds = $_GET['s'];
-- 
cgit v1.1