From bc31ed0e4647a568a1596cc2e09664675479a70d Mon Sep 17 00:00:00 2001
From: Pim van den Berg
Date: Fri, 1 Jan 2010 19:36:31 +0100
Subject: better validation of possible user input (get)

---
 plugin.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

(limited to 'plugin.php')

diff --git a/plugin.php b/plugin.php
index 054c559..54f75fb 100644
--- a/plugin.php
+++ b/plugin.php
@@ -1,10 +1,11 @@
 <?php
 
 require_once 'conf/common.inc.php';
+require_once 'inc/functions.inc.php';
 require_once 'inc/html.inc.php';
 
-$host = $_GET['h'];
-$plugin = $_GET['p'];
+$host = validate_get($_GET['h'], 'host');
+$plugin = validate_get($_GET['p'], 'plugin');
 
 if ($_GET['a'] == 'del') {
 	plugin_header($host, $plugin, 1);
-- 
cgit v1.1