as talked with lars ;-)

This commit is contained in:
Ralf Becker 2004-04-04 23:01:58 +00:00
parent ba4ed68752
commit fe8be115fb

View File

@ -135,7 +135,7 @@
$sort = "DESC"; $sort = "DESC";
} }
if ($order) if (!empty($order) && preg_match('/^[a-zA-Z_0-9, ]+$/',$order) && (empty($sort) || preg_match('/^(DESC|ASC|desc|asc)$/',$sort)))
{ {
$orderclause = "ORDER BY $order $sort"; $orderclause = "ORDER BY $order $sort";
} }