[svn r11875] $_SERVER['PHP_SELF'], api_get_self()

19 years ago · 04d066e9ba
parent daa02fd213
commit 04d066e9ba
1 changed files with 3 additions and 0 deletions
--- a/main/inc/global.inc.php
+++ b/main/inc/global.inc.php
@ -406,4 +406,7 @@ if(mysql_num_rows($q_last_connection) > 0)
 	$s_sql_update_logout_date="UPDATE $tbl_track_login SET logout_date=NOW() WHERE login_id='$i_id_last_connection'";
 	api_sql_query($s_sql_update_logout_date);
 }
+
+// preventing XSS injections on all scripts at once
+$_SERVER['PHP_SELF'] = api_get_self();
 ?>