as talked with lars ;-)

This commit is contained in:
Ralf Becker 2004-04-04 23:01:58 +00:00
parent ba4ed68752
commit fe8be115fb

View File

@ -135,7 +135,7 @@
$sort = "DESC";
}
if ($order)
if (!empty($order) && preg_match('/^[a-zA-Z_0-9, ]+$/',$order) && (empty($sort) || preg_match('/^(DESC|ASC|desc|asc)$/',$sort)))
{
$orderclause = "ORDER BY $order $sort";
}