jacob.eva/monerowp
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update monero_payments.php

Browse Source
This commit is contained in:
serhack 2017-11-22 20:10:01 +01:00 committed by GitHub
parent d903b28353
commit 9fcf1cb1de
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
monero/include/monero_payments.php
View File

@ -317,7 +317,7 @@ class Monero_Gateway extends WC_Payment_Gateway
setcookie('payment_id', $payment_id, time() + 2700); setcookie('payment_id', $payment_id, time() + 2700);
} else{ } else{
// Please fix this SQLI injection! TODO: Fix me! // Please fix this SQLI injection! TODO: Fix me!
$payment_id = $_COOKIE['payment_id']; $payment_id = sanitize_text_field($_COOKIE['payment_id']);
} }
return $payment_id; return $payment_id;
} }
@ -329,7 +329,7 @@ class Monero_Gateway extends WC_Payment_Gateway
$create_table = "CREATE TABLE IF NOT EXISTS $payment_id ( $create_table = "CREATE TABLE IF NOT EXISTS $payment_id (
rate INT rate INT
)"; )";
$wpdb->query($wpdb$create_table); $wpdb->query($create_table);
$rows_num = $wpdb->get_results("SELECT count(*) as count FROM $payment_id"); $rows_num = $wpdb->get_results("SELECT count(*) as count FROM $payment_id");
if ($rows_num[0]->count > 0) // Checks if the row has already been created or not if ($rows_num[0]->count > 0) // Checks if the row has already been created or not
{ {