Fix SQL injections in paygol_ipn.php

This commit is contained in:
Mark Samman 2014-10-29 19:42:16 +01:00
parent 48363b655a
commit 4884512e6f

View File

@ -10,18 +10,18 @@ if(!in_array($_SERVER['REMOTE_ADDR'],
} }
// get the variables from PayGol system // get the variables from PayGol system
$message_id = $_GET['message_id']; $message_id = getValue($_GET['message_id']);
$service_id = $_GET['service_id']; $service_id = getValue($_GET['service_id']);
$shortcode = $_GET['shortcode']; $shortcode = getValue($_GET['shortcode']);
$keyword = $_GET['keyword']; $keyword = getValue($_GET['keyword']);
$message = $_GET['message']; $message = getValue($_GET['message']);
$sender = $_GET['sender']; $sender = getValue($_GET['sender']);
$operator = $_GET['operator']; $operator = getValue($_GET['operator']);
$country = $_GET['country']; $country = getValue($_GET['country']);
$custom = $_GET['custom']; $custom = getValue($_GET['custom']);
$points = $_GET['points']; $points = getValue($_GET['points']);
$price = $_GET['price']; $price = getValue($_GET['price']);
$currency = $_GET['currency']; $currency = getValue($_GET['currency']);
$paygol = $config['paygol']; $paygol = $config['paygol'];
$new_points = $paygol['points']; $new_points = $paygol['points'];