fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

I solved all observation by Code Injection-Hight

Browse Source
This commit is contained in:
Paula V. Quispe
2015-03-12 14:51:09 -04:00
parent 8d379a2a58
commit 056784289a
4 changed files with 25 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
workflow/engine/classes/model/AddonsManager.php
View File

@@ -132,7 +132,11 @@ class AddonsManager extends BaseAddonsManager
$oPluginRegistry = &PMPluginRegistry::getSingleton();
require_once (PATH_PLUGINS . $this->getAddonName() . ".php");
G::LoadSystem('inputfilter');
$filter = new InputFilter();
$requiredPath = PATH_PLUGINS . $this->getAddonName() . ".php";
$requiredPath = $filter->validateInput($requiredPath, 'path');
require_once ($requiredPath);
if ($enable) {
//$oDetails = $oPluginRegistry->getPluginDetails($this->getAddonName());