Commit 3687abb9 authored by Frank Bergmann's avatar Frank Bergmann

- Improving security by added -limit_to xxx to all im_opt_val calls

parent aa841cf2
...@@ -32,7 +32,7 @@ ad_proc -public template::widget::simple_survey { element_reference tag_attribut ...@@ -32,7 +32,7 @@ ad_proc -public template::widget::simple_survey { element_reference tag_attribut
# --------------------------------------------------------------- # ---------------------------------------------------------------
# Get the value of the surveys # Get the value of the surveys
# #
set project_id [im_opt_val project_id] set project_id [im_opt_val -limit_to integer project_id]
set label $element(label) set label $element(label)
set dynfield_attribute_sql " set dynfield_attribute_sql "
select min(attribute_id) select min(attribute_id)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment