[Noalyss-commit] [noalyss] 08/23: Security remove direct access to $_REQUEST

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit 82efa19bd0ab40f42f45922bc0fc55887f6e0683
Author: sparkyx <danydb@noalyss.eu>
AuthorDate: Thu Nov 12 18:00:55 2020 +0100

    Security remove direct access to $_REQUEST
---
 include/class/anc_print.class.php | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/include/class/anc_print.class.php 
b/include/class/anc_print.class.php
index dedefcb..9f72e49 100644
--- a/include/class/anc_print.class.php
+++ b/include/class/anc_print.class.php
@@ -62,19 +62,20 @@ class Anc_Print
      */
     function get_request()
     {
+        $http=new HttpInput();
         if ( isset($_REQUEST['from']))
-            $this->from=$_REQUEST['from'];
+            $this->from=$http->request('from');
 
         if ( isset($_REQUEST['to']))
-            $this->to=$_REQUEST['to'];
+            $this->to=$http->request('to');
 
         if ( isset($_REQUEST['from_poste']))
-            $this->from_poste=$_REQUEST['from_poste'];
+            $this->from_poste=$http->request('from_poste');
 
         if ( isset($_REQUEST['to_poste']))
-            $this->to_poste=$_REQUEST['to_poste'];
+            $this->to_poste=$http->request('to_poste');
         if ( isset($_REQUEST['pa_id']))
-            $this->pa_id=$_REQUEST['pa_id'];
+            $this->pa_id=$http->request('pa_id');
         else
             $this->pa_id="";