MDL-12793 PARAM_HOST incorrect cleaning

2008-01-01 17:21:54 +00:00
parent 9263acf92a
commit fb179457ce
1 changed files with 1 additions and 1 deletions
@@ -452,7 +452,7 @@ function clean_param($param, $type) {
            return ereg_replace('/(\./)+', '/', $param);

        case PARAM_HOST:         // allow FQDN or IPv4 dotted quad
-            preg_replace('/[^\.\d\w-]/','', $param ); // only allowed chars
+            $param = preg_replace('/[^\.\d\w-]/','', $param ); // only allowed chars
            // match ipv4 dotted quad
            if (preg_match('/(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})/',$param, $match)){
                // confirm values are ok