diff options
-rwxr-xr-x | LedgerSMB/Form.pm | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm index b7a33278..133c5f23 100755 --- a/LedgerSMB/Form.pm +++ b/LedgerSMB/Form.pm @@ -96,12 +96,17 @@ sub new { { $self->error( 'Access Denied', __line__, __file__ ); } - + if ( ( $self->{action} =~ /(:|')/ ) || ( $self->{nextsub} =~ /(:|')/ ) ) { $self->error( "Access Denied", __line__, __file__ ); } for ( keys %$self ) { $self->{$_} =~ s/\N{NULL}//g } + + if ( ($self->{action} eq 'redirect') || ($self->{nextsub} eq 'redirect') ) { + $self->error( 'Access Denied', __line__, __file__ ); + } + $self; } |