Page 1 of 1
[Solved]Module is not properly cleaning input params
Posted: Thu May 16, 2013 7:43 am
by akke
My module keeps banging the admin log with: "Module is not properly cleaning input params". (admin_log table was 30MB)
How to clean the input params?
Running cmsms 1.11.6 on
php 5.3.22
mysql 5.5.30
apache
Re: Module is not properly cleaning input params
Posted: Thu May 16, 2013 10:10 am
by Jos
Check News module as an example:
http://viewsvn.cmsmadesimple.org/filede ... module.php
Code: Select all
function InitializeFrontend()
{
$this->RestrictUnknownParams();
$this->SetParameterType('pagelimit',CLEAN_INT);
$this->SetParameterType('showall',CLEAN_INT);
$this->SetParameterType('detailpage',CLEAN_STRING);
$this->SetParameterType('detailtemplate',CLEAN_STRING);
}
Re: Module is not properly cleaning input params
Posted: Tue May 21, 2013 6:10 pm
by akke
Thank you, Jos! Fixed and taken care of.