Skip to content

Commit

Permalink
Update
Browse files Browse the repository at this point in the history
  • Loading branch information
Daniel Neto committed Jul 13, 2024
1 parent f65547a commit 6a3494d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion objects/Object.php
Original file line number Diff line number Diff line change
Expand Up @@ -168,7 +168,7 @@ public static function getSqlOrderByFromPost($keyPrefix = "")
}

// add a security here
if (!empty($_GET['sort'])) {
if (!empty($_GET['sort']) && is_array($_GET['sort'])) {
foreach ($_GET['sort'] as $key => $value) {
$_POST['sort'][xss_esc($key)] = xss_esc($value);
}
Expand Down

0 comments on commit 6a3494d

Please sign in to comment.