summaryrefslogtreecommitdiff
path: root/LedgerSMB
diff options
context:
space:
mode:
Diffstat (limited to 'LedgerSMB')
-rwxr-xr-xLedgerSMB/Form.pm7
1 files changed, 6 insertions, 1 deletions
diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm
index b7a33278..133c5f23 100755
--- a/LedgerSMB/Form.pm
+++ b/LedgerSMB/Form.pm
@@ -96,12 +96,17 @@ sub new {
{
$self->error( 'Access Denied', __line__, __file__ );
}
-
+
if ( ( $self->{action} =~ /(:|')/ ) || ( $self->{nextsub} =~ /(:|')/ ) ) {
$self->error( "Access Denied", __line__, __file__ );
}
for ( keys %$self ) { $self->{$_} =~ s/\N{NULL}//g }
+
+ if ( ($self->{action} eq 'redirect') || ($self->{nextsub} eq 'redirect') ) {
+ $self->error( 'Access Denied', __line__, __file__ );
+ }
+
$self;
}